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The Canadian Security Intelligence Service (CSIS) was created by an Act of Parliament in 1984, cn wey Le 
the McDonald Commission of Inquiry in the late 1970s and the Mackenzie Commission of the 1960s. Th ug? 
CSIS Act established a clear mandate for the Service and, for the first time, legislated a framework of 
democratic control and accountability for a civilian Canadian security intelligence service. 


A 


In meeting its mandated commitments, CSIS provides advance warning to government departments and 
agencies about activities belle o H reasonably be suspected of constituting threats to the country's 
security. Other departments and agencies, not ESIS, are responsible for taking direct action to counter 
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CSIS does not have law enforcément powets, fheréfore, all law ‘enforcement functions are the 
responsibility of police authorities. The ‘splitting ét functians, combined with comprehensive legislated 
review mechanisms, ensures that CSIS remains under the’ nr control of the federal government. 
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In its early years, much of the Service's energy and resources were devoted ‘to,countering the spying 
activities of foreign governments. Time has passed however, and as the world has changed, so has CSIS. 


In response to the rise of terrorism worldwide and with the demise of the Cold War, CSIS has made 
public safety its first priority. This is reflected in the high proportion of resources devoted to counter- 
terréyism. CSIS has also assigned more of its counter-intelligence resources to investigate the activities 
of foreigh sPyernivients that decide to conduct economic espionage in Canada so as to gain an economic 
advantage or try to-acquire technology i in Canada that could be used for developing weapons of mass 
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structure and, most Dente ingrained understanding of its responsibilities and obligations to 
Canadians. The Service's màir pur meee to irfvestigate and report on threats to the security of Canada. 
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This occurs within a framework of accountability to government, “4s! well zeck th the law and the 
protection of human rights. Nowadays, it also mezgs being mare open ‘ahidi i tHe people it 
serves. There are some limits on what the Service can discut jos is the, nature iiig work mi Lag is 
anything but a secret organization. / 


The Canadian way of life is founded upon a recognition of the rights and oe 
carries out its role of protecting that way of life with respect for those values. To ensure this Balan Sir o 
approach, the CSIS Act strictly limits the type of activity that may be investigated, the ways that Gm kä 
information can be collected and who may view the information. The Act provides many controls to 

ensure adherence to these conditions. 


Information may be gathered, primarily under the authority of section 12 of the CSIS Act, only about 
those individuals or organizations suspected of engaging in one of the following types of activity that 
threaten the security of Canada, &©tițed inv@estion 2: 
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Espionage: Activities conducted for the puree “at gctfiting bY unlawful or unauthorized means 
information or assets relating to sensitive political, economic, selentific ot military matters, or for the 
purpose of their unauthorized communication to a foreign state Or foreten pplitical organization. 
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Sabotage: Activities conducted for the purpose of endangering the safety, security or defence of vital 
public or private property, such as installations, structures, equipment or systems. 


2. Førgi ST -influenced Activities 
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"foetus scayles-actvies detrimental to the interests of Canada, and which are directed, 

"Genie ren dor otherwise Sighifican@y affected by a foreign state or organization, their agents or 

other work Set théirpehalt. 
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3. Political Violence and Terrorism Le SNr SUp 


respond in a certain way. Acts of serious violence cause grave bodily harm or death to persons, or 
serious damage to or the destruction of public or private property, and are contrary to Canadian law or 
would be if committed in Canada. Hostage-taking, bomb threats and assassination attempts are 
examples of acts of serious violence that endanger the lives of Canadians. Such actions have been used 
in an attempt to force particular political responses and change in this country. 
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Exponents and supporters of politicafrligious ar identogical violence may try to use Canada as a haven 
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4. Subversion On 


Subversion: Activities intended to undermine or overthrow Canada's constitutionally established system 
of government by violence. Subversive activities seek to interfere with or ultimately destroy the 
electoral, legislative, executive, administrative or judicial processes or institutions of Canada. 
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The tS Act pratit the Service Gaata: of advocacy, protest or dissent that are 
conducted iawtlly.” im d inwestigate these typed of actions only if they are carried out in 
conjunction with oné Kahe Die pravidusly identified types of activity. CSIS is especially sensitive in 
distinguishing lawful protest ahd advocacy Ein potentially subversive actions. Even when an 
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As well as investigating the four types of threats to Canadian security, CSIS provides security Mar Ney S 
assessments, on request, to all federal departments and agencies with the exception of the Royal We 


Canadian Mounted Police (RCMP), which conducts its own. These assessments are made with respect to 
applicants for positions in the Public Service of Canada requiring a security clearance, and for 
immigration and citizenship applicants 


Security Assessments EG 


The purpose of security aksesshnents is to appraise. the tayalty po Canada and reliability, as it relates 
thereto, of prospective government employees. The intent pf the exertise is to determine whether 
persons being considered for security Glearanicesiare susceptible ‘to blackmail or likely to become 
invoived in activities detrimental to national security, d defined in section 2 of the CSIS Act. The 
assessments serve as a basis for recommending that.the deputy head of the department or agency 
concerned grant or deny a security clearance to the individual if question. Security assessments are 
conducted under the authority of sections 13 and 15 of the CSIS Act, 
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The designated manager in the department or agency determines the security clearance level required 
for the position to be filled, in accordance with the standards set out in the Government Security Policy. 
CSIS then conducts the appropriate checks. The duration and depth of the investigation increase with 
the clearance level. 
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GEN Bf Phe CSIs Act atithprize fhe Service to provide security assessments for the review 
of citizenships | (rhtétgration applications to the Bépartment of Citizenship and Immigration. 
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The assessments provided by the Service for this purpose pertain ta the provisions of section 2 of the 
CSIS Act that deal with threats to the security of Canada. The Department of Citizenship and 
Immigration uses these assessments to review immigration: ‘Applications in accordance with the 
inadmissibility criteria set out in the Immigration and Refugee Protection, Act Eat 1 Februaty/1993, this. 
Act was amended to include, the terms "terrorism" and "members óan organization’. This measuté has” 
increased the pertinence of CSIS assessments. Moreover, the inadmissible chasses Posch uge, i in 
section 19(1)(f), persons who have engaged, or are members of an organization that Has eneseed, eg 
acts of terrorism or espionage. 
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The same practice is followed for citizenship applications. They too are examined on the basis of the 
definition of threats to the security of Canada set out in section 2 of the CSIS Act, and security 
assessments are provided under section 19 of the Citizenship Act. 
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CSIS was created by the passage of an Act of beat een gene 21, 1984. The Service began its 
formal existence on July 16, 1984. `A d? 
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What does CSIS do? 


CSIS has a mandate to collect, analyze and retain information or intelligence on activities that may on 
reasonable grounds be suspected of constituting threats to the security of Canada and in relation 
thereto, report to and advise the Government of Canada. CSIS also provides security assessments, on 
request: ‘a)) fédeya| departments and agencies, with the exception of the RCMP. 
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created because the Governiriedtiah¢ mt: fter intensive review and study, came to the conclusion 
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that security intelligence investigations would be more appropriaee sited Waren agency. CSIS 
has no police powers. However, CSIS works with LUA poli¢e forces on thase, ingoa ha have 
both nationa! security and criminal implications. Althoygh Cap can offer assistant te lc, 
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no mandate to conduct criminal investigations. 
What constitutes a threat to the security of Canada? Lin, Ep 
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The complete threat definitions can be found in section 2 (a,b,c,d) of the CSIS Act. Simply put, terrorism 
(the planning or use of politically motivated serious violence) and espionage (undeclared foreign 
intelligence activity in Canada and detrimental to the interests of Canada) are the two major threats 
which CSIS investigates. Terrorism and espionage can have criminal implications. In such cases, the 
RCMP investigates and can lay the appropriate criminal charges. 
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Security intelligence is information forriutate feassist’government é Gekision takers i in developing 


policy. Regardless of the source of intelligence; itipravidésaahie’inaddition to what can be found in 
other government reports or in news stories. inteligeneorconveyeshe sary behind the story. 
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How does CSIS obtain this "value-added" component? 


The "value-added" comes from analysis and a wide variety of investigative techniques, including the use 
of covert and intrusive methods such as electronic surveillance and the recruitment and tasking of 
gie ei sources. 
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they are deployed. met we Zieode Soch as electronic surveillance, mail opening and covert 
searches-require a warrant rennt be? of Ma Federal Court of Canada. In addition, the Security 
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are lawful and comply with the Service's policies cipracediurgs. NS 7O 
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What does CSIS do with the security intelligence it collects? SS gie Dee Ke Ge ©, 
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CSIS reports to and advises the Government of Canada. CSIS intelligence is shared with a IW Je, S 


other federal government agencies and departments, including the RCMP and the departments eh ‘On A 
Foreign Affairs and International Trade, Citizenship and Immigration, and of National Defence. As well, 
CSIS has arrangements to exchange security-related information with other countries. The vast majority 
of these arrangements deal with visa vetting. A small number deal with exchanges of information 
collected by CSIS in its investigation of threats to national security. 


What is the difference between ray, Date service and a foreign intelligence service? 
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A security intelligence service is cestricted fo wn Gene? to its country's national security. A 
foreign intelligence service, dn ‘the. piret hend; eepducts offensive operations for its government in 
foreign countries. The methods and Objectives ¢ offoreign intelligence services differ from country to 


Ki 


lan Ema, 
country. 4Co a SY 
On, On, 


Does CSIS have any foreign presence at all? 


CSIS has liaison offices in some countries. Liaison officers are involved in the exchange of security 
intelligence information which concerns threats to the security of Canada. 


Does RE TEE espionage? 
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the activipies òfToreigh' government hiat, ehgagein economic espionage as a means of gaining an 
economic advalitage í fokshembelves. Economic espidnage can be defined as the use of, or facilitation of, 
illegal, clandestine, coercive or flecte means by a foreign government or its surrogates to acquire 
economic intelligence. SÀ 4 Nes RSO 
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Does CSIS conduct investigations on university campuses? 


CSIS is very sensitive to the special role that academic institutions play in a free and democratic society 
and the need to preserve the free flow of ideas, therefore, investigations involving university campuses 
require the approval of senior eg, in the Service. Furthermore, human sources and intrusive 
investigative techniques may orhe, gedah t the approval of the Minister for Public Safety and 
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The CSIS Act prevents the Service from confi irming e gem theexstence of specific operations. To 
disclose such information would impede the Service's investigative,c 2 cababiities which, in turn, would be 
injurious to national security. CSIS, however, can assure the public HA itis, dom everything within its 
mandate to ensure that Canadians are safeguarded from terrorism and foreign espionage. 


Given that the Cold War is over, are there still threats with which Canadians should be concerned? 


Yes. , Dien Gë the Service's view of the security Wong environment can be found in its 
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Backgrounder No. 2 has been archived. Oe 


Archived Content 


Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us” page. 


Pp fe 
j Jus, A, 
Ong CR, 
Aco SOK Dës 
Ego The OY, 
ey Bor Fy Gleef 
November 2004 Tou, TON SE by Op "er, He 
j SC ES VED . Moy, C7 : 
Loy 5 ee YO, os, YOR 


Intrusive methods are sometimes required to fuffitthe mandate of the Canadian Security Intelligence 
Service (CSIS). As such, ensuring that there is an effective'system te provide direction, management and 
accountability is of primary importance. The system that was laid down th the CSIS Act is composed of a 
series of interlocking parts resulting in CSIS being one of the most open dhid accounta ble security 
intelligence organizations in the world. E 
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Kë Mitte df/Public Safety and Emergency Preparedness (PSEP) is responsible to Parliament for CSIS ` 
as d-whole and Agr fts general direction, The Minister also issues policy guidelines concerning basic 
operational priicedurés.andisinformed of security Operations and problems, should they arise, by the 
Deputy Minister, the Director Ecis, Sg.the Inspector General. 
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The Deputy Minister has a statutory duty to consult on geste operational palicies and to provide“ ^ dei? 
advice to the Minister on the need for general direction to CSIS, as welas How the Séryiçe implements 
this direction. Through involvement in the warrant application process, the Deputy Meter iSkept 


3. The Director 


The Director of CSIS is responsible to the Minister for the contro! and management of the Service. The 
Director must consult with the Deputy Minister on the operational policy of CSIS, on applications for 
warrants, and on any other matter for which the Minister indicates such consultation is needed. The 
Director also submits periodic reports pp CS activities to the Minister. Finally, the Director chairs a 
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The Inspector General, created by Parliament in the CSIS Act, reports Ate, Deputy Minister to the 
Minister. The Inspector General is responsible for monitoring the Service's compliance with its 
operational policies, reviewing the operational activities of CSIS and submitting a certificate setting out 
the degree of satisfaction with the Director's annual operational report. The certificate and the report 
are forwarded by the Minister to the Security Intelligence Review Committee (SIRC). At the request of 
the Minister or SIRC, the Inspector General may conduct research and enquiries. 
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SIRC is composed of between three and five Privy Councillors whi are pot snenbayof the House of 
Commons or the Senate. SIRC members are appomted.b the-Governor in touné. Poet Gr pmaking these 
appointments, the Prime Minister consults the Leader o the Oppasition and the Teger Of any, patty that 
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The Committee's responsibilities are extensive. First, SIRC reviews the Service's ce Se ari 
and functions, especially with reference to the Director's reports to the Minister, the InspectOhigerehit 
certificates, and the directions of the Minister to the Director. ION; e a 


Second, SIRC investigates the complaint of any person with respect to any act performed by the Service. 
The Committee also investigates complaints from those individuals denied security clearances in the 
cases of public service employment, or in the supply of goods or services to the Government of Canada. 
In addition, SIRC receives reports concerning immigration applications and may receive reports 
concerning citizenship applicatiofiswhich awe been rejected on security or criminal grounds. 
AS d 
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Commensurate with these réappnstbilities, SIRC hasbeen pranted shiegial powers. The Committee has 
access to all information uhderthe' Sewice's beantrol, with the exception oi of Cabinet confidences, as does 
the Inspector General. SIRC has thé dupharity/ve dee e Inspector General to.examine specific 
activities. It may also conduct such investigations See staff. 
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The analyses by SIRC of the Service's performance are provided to tH Sn an ongoing basis. In 
addition, the Committee is required to produce an annual report which is presented to the Minister for 
tabling in Parliament. 
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Prior to tke f ‘tit ior ofCHS, the use of intrusive investigative techniques was authorized by the then 
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dng esthe justification for an Intrusive investigative technique, must first be reviewed by CSIS 
managers, and dipequenthby a senior committée within the Service chaired by the Director. This 
committee includes re rę reanytatives from the Department of Justice and PSEP. If the decision is to 
proceed with the warrant‘application, the affi idavit is then submitted to the Minister of PSEP, who must 
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approve it personally. Only after receiving the a s approv nono to a judge of 
the Federal Court for a decision. ef: 
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A Special Committee on the Review of the CSIS Act and the Security Offences Act was establihidd by, 4 We. lo 
order of the House of Commons dated June 27, 1989. This order, based on the stated requirement in < Ta 


section 56 of the CSIS Act, required the Committee to undertake a comprehensive review of the 
provisions and operation of both the CSIS Act and the Security Offences Act and to report its findings to 
the House of Commons. These findings are the subject of a report entitled In Flux But Not In Crisis. 


The five-year review committee was later reconstituted as the Sub-Committee on National Security of 
the Standing Committee on Justice and the Selicitor General. Its work plan has included reviewing the 
functions of CSIS. In addition, the Committee has torisidered reports made by SIRC, the annual 
statement of the Mäiger with SC to Nati og) Security, and. the Public Report from the Director of 
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In 1991, the Government of Canada responded to the Five-Year eet — Committee's 
report on the CSIS Act and the Security Offences Act with On Course. In On Course, the Government of 
Canada made a commitment to provide Parliament with more information on the national security 
system. This stems from the recognition that effective legislative control over CSIS must be accompanied 
by increased public knowledge about its role. The Minister of PSEP and CSIS meet this commitment by 
providing Parliament and the public with the Minister's Annual Statement on National Security and the 
CSIS Public Report and Program Outlook. 
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j> Ihe Minister i is reSppnsible t for three.main elements of the national security system. These elements are 

De ra shay ‘ingelligence; seclifity.enforcementyand protective security. The Minister's Annual Statement on 
Weer Sdeurity Kan overview ofthese three elements. Taken together, the Statement and the CSIS 
Public Report aréi thtended to provide Canadians With an assessment of the current security intelligence 
environment and thegovsenment’s efforts to ensure national security, 
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Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us" page. 
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The primary mandate of CSIS is to collect and ariafyze information and subsequently to provide reports, 
in the form of security intelligence, to the government: CIS produces intelligence in order to provide 
advance warning to government departments and agencies about activities which may reasonably be 
suspected of constituting threats to Canada's security. One of the primatyvalues of intelligence- 
gathering is the timely delivery of perishable information to policy-makers in government. The five 
phases of the process that produces these results is known as the security intelligence cycle and they are 
described in this backgrounder. 
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concerning the policies, operations and management of CSIS. Fo guidelines ForSeryice activities are 
established through these directives. Direction of this naturecoyers many area Steis, 
including guidance in the use of investigative methods arid techniques, It also erisúřes that the Midister 
is a key decision-maker within the Service's legal and polity framework, "E , “HO, AND 
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Regular direction from government on intelligence priorities is one characteristic Ra diş) (Den the 
Service from a police organization. Police agencies conduct criminal investigations based upbthe baw, £ 
Security intelligence work is rooted in government priorities formulated within the context of the O S 
legislative framework of the CSIS Act. 


Intelligence priorities are re-evaluated each year in light of an annual assessment by the Service. This 
assessment is based on the Service's review of the constantly changing security environment. CSIS has 
established an ongoing environmental scanning capability in order to integrate government 
requirements more directly into thy intelligence cycle. Based on consultations with other government 
departments and agencies, an assessmentig then-provided to the government. Following ministerial 
consideration of thepgsessment the Minister thet provides direction to the Service. 
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The Service has established a G vier Dison Unitawhich is réspishsible for maintaining regular 


contact with departments in order to obtalfi their. euurity Intelligence requirements. This enables the . 
Service to tailor distribution of its information to a dépertmeit's specific requirements. 


2. Planning 


Planning encompasses the entire intelligence process, which begins with the threat assessment phase 
and culminates with the delivery of the final intelligence products. Plans are geared to meet the 
government's security intelligence requirements. In response to client needs and ministerial direction, 
Ces determines9.co-ordinated strategic approach. In this way, resources are allocated for 
investigations dnrthe basis of government-approved criteria. 
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Mali man irtvestjgation, cafet taken to ensure an appropriate balance between the degree of 
trett Stee of aif Jayestigation and conten forthe rights and freedoms of those being investigated. 
Low-level investigations; Cénsisting primarily of the collection of open-source information, may be 
approved by operationalstipesvisors. Jnvestigations which may call for the use of more intrusive 
techniques are subject to a rigorolsprocess of challenge and controls, including a review by senior 
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All investigative activities must abide by ministerial direction. Section-210f thé CS Act requires CR 3 


judicial authorization in the form of a Federal Court warrant must be obtained beforéceytain intrusive 

techniques are used. A Federal Court judge must be satisfied, after examining a CSIS draf wartant and 
Z 

accompanying affidavit, that there are reasonable grounds to justify issuing such a warrant. 
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3. Collection 


Collection is the preliminary phase of the Service's advisory role to government. Information from 
members of the public, foreign governments and technical interception of communications are 
combined with information from open sources jncluding newspapers, periodicals, academic journals, 
foreign and domestic broadcasts, official documents and other published material. 
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The Service uses a variety of collection methodsto monitor indiiduals-on groups whose activities are 
suspected of constituting a threat to national Security: Through such monitoring, the Service can identify 
individuals with suspected connections to terrorism and persons operating in Canada on behalf of 
hostile intelligence services. In addition to monitoring potential espionage and sabotage efforts, the 
Service is mandated to inform the government of foreign-influericed activities within or relating to 


Canada that are detrimental to the interests of this country, are clandestine or deceptive, or involve a 
threat to any person. = 


In the competitive global economy of the 1990s, acquiring scientific and technological information from 
other countries has become increasingly important for many nations. Sometimes, this is done by covert 
or unlawful means. As a result, CSIS has intensified its activities to detect economic espionage against 
Canada scientijc and technological interests by foreign governments and/or their surrogates. 
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& T7 CSS ypalfíing Ad de Yéeucily Raison der: at a number of Canadian diplomatic missions abroad. 
WEI? së ee Workwith selectedtoneipn Police and security intelligence agencies. They also collect and 
analyze Venir available tréfarmation on’ plobal treads which may have Canadian security implications, 

and, finally, they Ganduct Security streening assessments of prospective immigrants. 
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Policy makers rely on security intelligence prepared by Serviceanalysts fallowing the tattoo. Vp Yo, 
collection stage. Analysts in all operational programs use their knowledge oF regioral, national A fa 4 
global trends to assess the quality of all types of information gathered, and Organize itinto useful 
security intelligence. _ i A Den Som, 
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Information collected by investigators is initially assessed at a regional office prior to its transmission to 
CSIS Headquarters in Ottawa, where a second-phase analysis is undertaken from a national perspective. 
This investigative reporting is then combined with information gathered from consultations with 
government agencies, other intelligence agencies and open sources. Further analysis of the information 
is carried out within an intelligence analysis program dedicated to the preparation of CSIS intelligence 
reports. 


Privy Council and consists of deputy-mimisterleyel Officials of departments and agencies active in the 
security and intelligence field, including CS. lan Ne; Lo, 
e | 
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5. Dissemination “Anois 


The CSIS Act designates the Government of Canada as the main recipient of CSIS intelligence. Under 
section 19 of the CSIS Act, the Service distributes a variety of reports, including threat assessments, to 
various departments of the federal government and law enforcement authorities. 
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The RCMR depeso threat assessments to determine the level of security required to protect foreign 
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The Mackenzie Commission of 1969 and the McDonald Commission of 157%: recommended that, in 
order to balance the need for accurate and effective security intelligence with the need to respect 
democratic rights and freedoms, Canada's security intelligence functions should be separated from the 
RCMP and that a civilian service should be formed. 


In AQgust 1981, the federal government announced that the Canadian Security Intelligence Service 
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The CSIS Act was given Royal Assent in June oe and CSIS Ee n July 16, 1984. 
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At that time, the new Service had a staff of 1,968. CSIS E a ees eight Separate bei A Ge 
throughout Ottawa, working in operational units for counter-intelligAtge, $ counter-tetrorism, baa. R 
subversion and security screening during the early months of the new orgañitàtign’s Wisteńnce: The 
distribution of resources for counter-intelligence was four times greater than for -couhter ferFerisa th 
_those early days. ha, “Ne, 
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In 1987, the Solicitor General tabled in the House of Commons the third Annual Report of the Security 
Intelligence Review Committee (SIRC). In its report, SIRC raised a number of concerns about CSIS, 
prompting the Solicitor General to announce the formation of an independent advisory team headed by 
Gordon Osbaldeston, former Clerk of the Privy Council, to study several specific issues raised by SIRC 
and present a plan of action tothe Solicitor General. 


Or 
One of the issues studied by reat RS tearmwas hatte Cep policies on recruitment, training & 
development and petspnnelmanagebyent | had prowded. the-Servite with the proper mix of skills, 
education and experience Touneet the‘intelligence. requirements. of the goverment, 
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Regarding the adequacy of CSIS resources, the Osbaldeston Repor}.conctuded that, with the 
proclamation of the CSIS Act: " ... a number of new requirements were also, created, many of which had 
to be provided from scratch. TI: them were a complete management struetire, an administrative 
system to provide the support previously drawn from the RCMP, accommodation separate from the 
RCMP, new communications and computer systems and a methodology for dealing with a complicated 
system of external review. All of this was to be provided, as a former member of CSIS management put 
it, don a shoestring’. The turmoil generated in simply getting CSIS established is a factor often 
overlooked by the critics," the Report said. 


— soapy ies things, the Report recommended a complete review of all CSIS capital and operating 
Jf- Tesource requiréments to, detetmine a basis " ... from which to set reasonable and adequate resource 
“hi OT velg för: the Se Service” the. government responded by providing additional funding over four years for 
SM "neige sat Oëeating requitéments The report also called for an "immediate" solution to the 
problé eregtdðny fainga staff thatAvas by 1987 at a level of 2,153 operating in separate buildings 
throughout Otta, THE gpvetnment r responded with a commitment to construct the new headquarters 
building at a total costof$451-iilian. "The new building houses all CSIS headquarters personne! under 
one roof. Construction of the facltiby wavcompleted i in 1995 within the approved budget. 
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Looking back on implementation of the government's décisjan ta‘astablish CSIS, the Osbaldeston Report 
noted the Security Intelligence Review Committee's concen that the counter-subversiowprogram e, 

casts its net too widely”. Osbaldeston recommended that the coufiter-subyerston branch be élitninated, Ap 
and that its duties and functions be reassigned. The Service responded by eliminating the counter- 
subversion program as a separate organizational entity. l > 


Ma Tinks 
With the number of terrorist incidents accelerating dramatically in the eighties, worldwide patterns and " 
the scope of terrorist incidents became more and more apparent. One of the consequences was that 
terrorism became increasingly defined as an intelligence problem as well as a police matter. In Canada, 
counter-terrorist activity increased following the 1982 assassination of a Turkish military attaché en 
route to work in Ottawa, and the 1985 takeover of the Turkish Embassy, in which a security guard was 
killed. Air india Flight 182 was downed off the coast of Ireland in 1985, resulting in the deaths of all 329 
people on board, most of whom-were Canadians. 
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Partly as a direct respotise-to these developments, couhter-tértarism resources, including personnel, 
were increased during 1986 ard 2987.As a consequence pf the dramatic changes to the security 
environment in the past twenty years, Here Jas been a continuing adjustment of operational resources 
to match the changes in the security environmient, Particula rly the September 41, 2001 terrorist attacks 
on the World Trade Center and the ensuing globatresporise to terrorism prompted further adjustments 
to Service resources. In 2002, a counter-proliferation responsibility centre was created within CSIS to 
answer the growing threat to international peace and security from weapons of mass destruction. 
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Resource Profile 


Since its inception, the Service has experienced significant shifts in its human resource levels. The 
government's restraint program and Program Review exercises resulted in a decreased workforce 
between 1992 aid/4.998, where its complement was reduced by 28 percent or 760 positions. The impact 
of Program Reviews and afker reductions brought the Service's human resource level down to 2000 
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In 1998, the Service assumed responsibility for the security scrëéning of employees, of the Department 
of National Defence (DND), which augmented the Servité’s base badget through a transfer of resources 
from DND. Since then, there have been ongoing increases to the. FTE level. dye to increased immigration: 
security screening requirements. Resource levels also increased in fiscal Year 1999/2000; due to Year 
2000 requirements. A Lin, Pep l4 

Fo D Si Wy, 

| Mary bls 
Finally, following the terrorist attacks on the World Trade Center on September 11, 2001, the id 
government approved additional funding in an effort to bolster its counter-terrorism capabilities, 
resulting in the Service's human resource level reaching 2380 FTEs by fiscal year 2006/2007. 


The Service is dealing with staff increases through a targeted recruitment strategy. Special emphasis will 
continue to be placed on maintaining the aperational integrity of the Service, and essential positions 
must continue to be staffed by people with the'qualifications and specialized skills related to security 
intelligence. Therefore, the Service will’cantinué te recruit high-calibre university graduates to become 
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intelligence officers. 


A Representative Workforce 
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Because CSIS is a national organization, it maintains a presence throughout'itie €ountry. Nearly half of its 
workforce is based in six regions extending from the Maritimes to British Columbia. Most regions have a 
head office and district offices. The remaining CSIS employees are located at Headquarters, in Ottawa. 
The Service tries to ensure that the various ethnic groups that constitute the Canadian mosaic are 
equitably represented in its workforce. 


As d Federal institution, CSIS ensures that the objectives of the Official Languages Act are met within the 
Service. CB y fitted to ensuring: that communications with the public take place in both official 

languages astequired py the Art: that work environments promote the use of either official language by 
Eë éiimloyees in the regiorisdescribied in the Act; and that its workforce reflect the presence of the two 


Le 29 fila Aangtiage communitiesin Canada, While endeavouring to provide equal opportunities for 


emipldyméht and advancement within the Sryjce to both English- and French-speaking Canadians. 
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CSIS also ensures that programs and strategies are developed rt haaget Sithe recruitment, 
development and retention of persons who are members: ofthe four emblaymenteguit f designated 
groups: women, visible minorities, persons with digabilitlevand ‘aboriginal peoples), est AS 
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developing professionally. To this end, employees can participate in both internal or external courses 
and seminars that allow them to develop new skills, acquire knowledge, or gain new perspectives in 
areas that will help them perform their duties. 


The Service's internal training and development program is comprehensive, covering a full range of 
training and seminars related to Mafiagement, professional development, informatics, as well as 
operational matters. External courses are used to enhance employees' skills on non-CSIS specific topics. 
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The range of CSIS activities means that its employees mast’ paséa vatlety of academic backgrounds 
Pry POL) e d $ 
and abilities. To operate effectively, the Service needs not only intel Ge\officers, but also scientists, 
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engineers, technologists, translators/interpreters, technicians, nformmatëgspetialtsts (librarians, library. 


technicians), financial and information technology specialists. 


The intelligence officer category is the core professional group. They are responsible for the collection, 
analysis and production of intelligence. In order to be considered for employment in this category, the 
follawing qualifications are required: 
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Meeting these nc nemen in applying ; te-work at CSIS. The application 
process is rigorous, competitive antilengthy de pféthe sensitive nature Of,CSIS's work, all 
applicants must undergo security backgrouhid ropp, © 


Canadian citizens interested in a career with CSIS are encouraged to lige to the Canadian 
Security Intelligence Service's career Web site. When you submit your résumé to CSIS, your personal 
information will be protected under the federal Privacy Act. 


Important note: Once you begin the process of filling in the on-line application form, you should not 
wen ` because the process could time-out. Therefore, applicants should make sure that the following 


infortRatian is is Wie available: 
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A list of all foreign countries you have travelled to or lived in and when, excluding the USA, and whether 
the travel was for holiday, business, study or other reason. 
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"On OC. 
Should you time-out before you have nde the lication form, you will be required to re-register 
completed tegen 
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- The establishment of the civilian Canadian Security intelligence Semice and the disbanding of the Royal 


PRO 


Canadian Mounted Police Security Service by an Act of Párliameritin 1984 recognized the differences 
between security intelligence activities and law enforcement work, The 12Q,year old interlocking of 
Canada's security intelligence service with the federal police force was brought to a close. 

di 


The evolution towards the Canadian Security Intelligence Service began when Sir John A. Macdonald 
created the Western Frontier Constabulary in 1864. This was to be a "...detective and preventive police 
force, for the purpose of watching and patrolling the whole frontier from Toronto to Sarnia." The 

en oe operated along the Upper Canada borders and rail lines, reporting on activities related first 
to the 'injericartGiyil V War, then to Fenians whose goal was to overthrow ‘English rule in Ireland. Eastern 
Canada was Jooked fer the Montreal Water Police, a federal agency like the Constabulary which 
was Set up Veil dari shal He was later replaced by Joseph Coursol. Both forces 
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In 1868 the ae (ppndinare a perceived need, set upa 12-member Dominion Police force in 
charge of guarding public bélldings Bnd, carrying out the previous responsibilities of the Western Frontier 
Constabulary. This force, under Gilbert, Miete and Coursol, assigned people to a security intelligence 
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The Dominion Police, with Canada's developing security intelligence function, was amalgamated déi A 
the 2,500 members of the Royal North West Mounted Police in 1920 to form the. ere 
Mounted Police. Between the wars, the security intelligence function remained smalt and.” 
inconspicuous. At the headquarters in 1939, it employed only three members and two sen 
with field units in the larger cities investigating threats such as the fascist movement. The espionage ba 
activity related to the Second World War, and the subsequent defection of Soviet cypher clerk Igor 
Gouzenko in September 1945, removed any thoughts the government might have had about reducing 
the security intelligence function to pre-war levels. 
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Gouzenko's revelations of a number of elaborate Soviet espionage networks operating in Canada 
ushered in the modern era of Canadian security intelligence. Previously, the "communist menace" had 
been viewed by authorities in terms.of its threat to the labour movement. Gouzenko's information 
showed that the Soviets of the day were interestedin more-than cultivating disaffected workers: they 
were intent on acquiring military, scientific and technological information by whatever means available 
to them. Such knowledge hág become the Key to advancement, atid the Soviets intended to progress. 
Thus, as the post-war period gave way to the Caid War, Canadian security intelligence operations grew 
in response to this new threat. We SS Lo, Sy 

Espionage, however, soon became only one aspect of the gue un Beien involved in 
Canadian intelligence work. The 1960s provided challenges of an entirely ‘different and unprecedented 
order. In Quebec, members of the Front de libération du Québec (FLQ) emerged and used assassination, 
kidnapping, bombing and other acts of terrorism in attempting to achieve their political goal. Other 
events, such as the debate over the deployment of nuclear weapons on Canadian soil, the escalating 
involvement of the United States in Vietnam, and the evolution of a vigorous peace movement carried a 
potential for politically motivated violence, foreign-influenced activities and subversion. It was necessary 
to identify potential threats, but in order to fully maintain the democratic way of life of Canadians, it 
was also'neepssar¥to-scrupulously protect the right to exercise legitimate political dissent. 
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En (siene) made all te more complex by the conflicting combination of priorities and 
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beet: security, intelligefee investigations as compared to police work. Two different 
Hearts hait ebe) Mackenzie in 1969'and Justice McDonald in 1977 recommended that 
the security intelligence f Hons be separated from the RCMP and that a civilian service be formed to 
carry out those functions. Both tria fecognized that the problem of balancing the need for 
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accurate and effective security maiie with ge need to ejar hE and freedoms 
could not be adequately resolved as long as securi omeen ernieren of the 
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In 1970, following the report of the MacKenzie Commission, John Starnes, a eier officer with 
the Department of External Affairs, became the first civilian Director General of the ROMP, > Zén GC 
Service. Institutional links between the Security Service and the main body of the RCMP became more’ Vs 
flexible, but problems, due to the different natures of security intelligence work and police work, “y 
remained. The establishment of a civilian security intelligence service came with the findings and 
recommendations of the McDonald Commission. In August 1981, the federal government announced 
that a security intelligence service, separate from the RCMP, would be created. A Security Intelligence 
Transition Group task force was formed to plan and oversee the establishment of the new organization. 
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` The first legislation to establish the security intelligence service, Bill C-157 , "an Act to Establish the 

Canadian Security Intelligence Service.(CS!S}", was introduced in Parliament in May 1983. In response to 
public concern aboutthe legislation, a special committee of the Senate was established to examine the 
Bill. Chaired by Senator. Michael Pitfield, it produced findings.and tecommendations in November 1983. 
Acting on suggestions in this report, the federal governmént tabled amended legislation, Bill C-9, in the 
House of Commons in January 1984; It was passed by-hoth Houses of Parliament and given Royal Assent 
in June 1984. CSIS began its formal existencé:on July 16, 4984 with Ted Finn as Director. In addition to 
creating a civilian security intelligence service, the Act also created SIRC, to review the activities of CSIS. 


tiie Osbaldeston to review concerns raised by SIRC and present a plan of action. Osbaldeston's 
report recommended changes to the executive, proposed a new support infrastructure, and suggested 
elimination of the Counter-Subversion Branch. By 1988 the Service had a new Director, Reid Morden, 
and significant internal changes had been enacted, not the least of which had been the dismantling of 
the Counter-Subversion Branch as had been suggested. 


Lei 


TA . e e 
i -ED 
The Act E ITSE Së also sought to ensure that the Service would continue to develop as an 
Län See and respondible © organization; To this end, section 56 called for a comprehensive review of the 

y ope “anéigperations ofthe C $ Act főbe undertaken after July 1989. As required, the five-year 
review led toy eg SIS Act "eso by a Special Committee of the House of Commons under 
Chairman blhiite Dicker shen, The’Committee s report Ié Flux But Not In Crisis, completed i in September of 
1990, declared thatthe s Setvieerandt theyAct were essentially on course, but provided recommendations 
for improvement nonetheless: The ther: Sofiettor General of Canada, Pierre Cadieux, responded to these 
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geo-political circumstances brought about by the end of the Cold War, the Solicitor General akeg then 
Director of CSIS, Ray Protti, to review the changing security intelligence environment tó deteritine if the 
Service should restructure and what resources would be necessary to respond to the changing?) Wee, | 
environment. The review concluded that the Service was essentially well-structured to respond to übe. 
changing security intelligence environment. Detailed results of this review were incorporated in the 


1992 CSIS Public Report. 
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In 1994, Ward Elcock was appointed the new Director of CSIS. 
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"Our orientation in national security is influenced 2onsidéfably bythe global security environment. Just 
as our national security system has undergone adjustmefitiand reurienttation over the last ten years, so 
must we be ready to adapt and reorient in the coming years". The’ Hon. éth.Gray, former Solicitor 

General, Statement on National Security, April 11, 1994 Wiele 
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The Hon. Herb Gray, former Solicitor General, 


Statement on National Security, April 11, 1994 
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The era when traditional global security relations overshadowed economic concemms,and regional 
conflict has passed. Accelerating economic interdependence, and international contpetitien have 
emerged as major sources of tension and conflict among world powers. In this uncertain environment, 
developed countries eager to maintain their standards of ving, and. developing countries €qually AN, 
determined to improve their own, are under pressure to use whatever means theyhave to improve” 
their productivity and ensure their economic security. One such means is economic espionage, which 
can be described as illegal, clandestine or coercive activity by a foreign government ig ¢ ‘order che 
unauthorized access to economic intelligence, such as proprietary information or technology) for 
economic advantage. 


Impact 


Although some spectacular incidents have found their way into media reports, analysis of the overall 
impact of economic espionage is difficult because of industry's reluctance to discuss the issue in detail. 
In fact, the General Accounting Officg = tH inyestigative arm of the U.S. Congress - had to abandon its 
plan to study the extent and impact of fovepament apying on U.S. companies when it became 
clear firms had little destretio discuss the matter. Canadian explorations of the issue have met with | 
similar responses. There are a nuttibes. of reasons for this el tege, reticence. In many cases, firms fear 
disclosure could harm their reputation, or ‘undermine shareholder gpalid R 
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Despite these obstacles to a formal calculation, business and government representatives generally 
agree that the cost of economic espionage activities to individual firms and the economies that host 
them is in the billions of dollars. In its new national survey, the American Society for Industrial Security 
(ASIS) estimated that intellectual property losses from foreign and domestic espionage may have 
exceeded $300 billion in 1997 alone. More than 1,100 documented incidents of economic espionage 
and 550 suspected incidents that could not be fully documented were reported last year by major U.S. 
companies. The 1997 survey revealed that high-tech companies were the most frequent targets of 
foreign spies, followed by manufacturing and service industries. Among the most sought-after 
Weg, it were research and development strategies, manufacturing and marketing plans, and 
customer Aig Dezem estimates that the loss to Canadian firms may also be in the hundreds of 
millions otal Of SE 
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The Canadian apyerniyent has transfor orga national requirements for security intelligence to reflect 
this modified gestanen. Currently, the government has identified economic security as one of 
its priorities. CSIS has responded to these changing dynamics and to their impact on Canadian defence, 
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foreign policy and economic interests. However, it is important Gage NSEronomic security is 
of significant concern to CSIS, public safety is the Lores ap Ge pm, ` Daun m 
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Though there has been a decline in offensive intelligence operations directed against Canada fta Mels 


members of the former Central and Eastern European services, a number of countries continue to car) D 
out such activity . Moreover, increasing global economic competition is leading many governments to 
shift the focus of their intelligence collection away from the traditional areas of political and military 
matters to the illicit acquisition of economic and technological information. One of our primary 
objectives is to monitor the activities of known or suspected foreign intelligence officers in Canada, and 
to prevent foreign visitors, students and delegates suspected of intelligence activities from gaining 
access to the country. ee 
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CSIS' mandate relative to, economic eet is t0 Wivestibate when necessary, clandestine activities by 
foreign governments that are potentialty detrimentafto Cakáda's economic and commercial interests. 
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CSIS seeks to forewarn government when the biheruiellevet playing field of free market competition is 
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CSIS does not investigate industrial espionage - the practice of one private sector company spying on 
another. If these activities are of a criminal nature, they may be investigated by law enforcement 
agencies. As well, civil remedies may be available. 


Theast majority of economic intelligence gathered by businesses or governments is derived from open 
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Canada is a world leader in many technology-intensive fields. Aer ospacp, biotechnology, dent. 
communications, information technology, mining & metallurgy, nuckear,oit Bees and environmerkal A 
technology are key industrial sectors in the Canadian economy. Canadian eńterppiséspintaiy and 

develop information and technology of economic significance, the protection of whithis esséttial tö 


their economic viability, and by extension, the economic well-being of Canada. Pay NN 
“tie > 


or 


KI 


A number of Canadian companies operating in these sectors have been targeted by foreign 
governments to obtain economic or commercial advantages. The damage to Canadian interests takes 
the form of lost contracts, jobs and markets, and overall, a diminished competitive advantage. 
Information and technology that has been the target of economic espionage includes trade and pricing 
information, investment strate zy, contract details, supplier lists, planning documents, research and 
development data, technical Tioga databases. 
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contract from a foreign government, allowed a nationat af that country to work on a sensitive, leading- 
edge technology project. The foreign government then proceeded to duplicate the technology using the 
information obtained through the direct access their representative agent had to this project. 
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In another instance, a foreign government is believed to have tasked its intelligence service to gather 
specific information. The intelligence service in turn contracted computer hackers to help meet the 
objective, in the course of which the hackers penetrated databases of two Canadian companies. These 
activities resulted in the compromise of numerous computer systems, passwords, personnel and 
resedtê files ofthe two companies. l 
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Za mothsciocdent, a len Sctentist Working in the biotechnology sector stole laboratory cultures and 

“dafi Hurt ek wets from a Canddtian contpany which is believed, in the process, to have lost valuable 

R&D dat, as weti’ag potersial earnings. it was tatey-determined that the individual involved had also 
stolen similar nvdferials Wom his Previous employer based in another country. 
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There is no limit to ingenuity when it comes to the clandestine collaction dksigniti¢ant economic 
information. The most frequently used collection method isthe recruitment of someone Who has access 

to the information (employees, contractors, consultants, studants/ete,). However other viethodss 

include break-ins, briefcase tampering, photocopying, garbage.retrigva} am pommunications a Wo) l 
interception. In the latter case, the means at the disposal of a foreign ggvëiimert to monitor wéi 4 Op 


telecommunications often exceed what is commercially available. Aca Lo, sy 
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Businessmen travelling abroad are vulnerable to economic espionage due to the limited control they can 
exercise over the foreign business environment. in this context, a foreign government can operate more 
easily and with greater impunity in its own country. Hotel rooms, restaurants, office buildings, safes, 
telecommuni-cations systems and personnel are more vulnerable than domestic counterparts to 
compromise through covert ecoridipic espionage activities. 

ien Ka 


Ke 
PRO «Re Ge: AE jp, 
In one case, it was suspected. that a höst government was intercepting telephone conversations 
between an executive abroa@and his Canadian company headquarters. Canadian executives discussed 
detailed negotiation information inicluding 4 Specific migimum bid. This minimym bid was the 
immediate counter-offer put forward by the host corapany'the following day. 
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In another incident, an executive from a Canadian company, while visiti éign company overseas 
with which it had a business agreement, strongly suspected that his briefcase ‘and documents had been 
compromised while they were left in the "security" of the foreign corporation's office. 


| Once again, if the potential gains are significant enough, any covert method or a combination of some of 
| them can be used to acquire the desired information or technology, and obviously it is easier for a 
| forei rn t to initiate covert activities on its own territory. 
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While some traditionally Kösyi" dauntries continue to pose a threat to Canada's economic security, 
there are strong indications that otherforeign governments - including some of those from countries 
considered "friendly" to Canada - Use espioriaige as a means to further their economic and commercial 


Ve 
WÉI 


3103(18/09) 


aye 


Oy, 
“Sion TO 
interests. Any competing nation, given suffi cient motivation, mare 2 y d Ze against 
Canada to further its economic objectives. "e "ze RE be O Ern 
OESE gy ROR cy e 
Oy Devt : Og EA Le Any. “ar, k A Cp 
S R O, AN, 
, “4 Lo, SENG, K Og, Maes, 
2. The Protection of Valuable Information Up Lal We La Lo, 
"ee firs SEA, 
ue, ie 
Op, POn 
National Liaison / Awareness Progr. Mu, Ni 
ational Liaison / Awarene ogram Mio 


"Canadians are concerned about their sense of security in the world - a world that is ever more 
influencing our conduct at home in terms of the economy, jobs, protecting the environment and our 
democratic institutions”. 
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The Service established its National Liaison/Awareness Program in January 4992. The program seeks to 
develop an ongoing dialogue with organizations, both public and private concérning the threat posed to 
Canadian interests by foreign government involvement in economic and defence-related espionage. The 
purpose of the program is to enable CSIS to collect and assess information that wiil assist it in its 
investigation of economic espionage activities against Canada. The Service then assesses the threat, and 
provides advice to government accordingly. 


“whit Gd have SEER and witnessed, obviously, by the end of the Cold War is a change in the focus and 
targeting of foreign intelligence services. They put more emphasis on economic espionage and on 


Gef acquiring scientifié and technological information. Our response to that program was to do something 
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_ tha rasthibles, a community interview’ ptogram. We established a liaison program. We tried to 
"dee linOwhiatargas of Canadiaty industry are likely to be most targeted. Obviously it is in those 
technotogyareasike aerospace, nuclear) biochemical, and telecommunications in which we have a 
state-of-the- artand stafett thé world industry’ 
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Ray Protti, former Director of CSIS, t aces 
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The program is voluntary. It provides organizations with a better appreciation of the threat 
environment, and thus enables them to better protect themselves. Upon request, an Economic and 
Information Security (EIS) coordinator can provide an organization with formal presentations. CSIS has 
regional and district offices across the country. l 


Based on CSIS' experience in investigating foreign government espionage activities in Canada, the 
presentation includes a review | OF the mostcammon covert methods used, as well as elements that 
businesses should consider in assessing thir owrewulnerabilites. CSIS does not provide a security 
consulting service, opd amer provide specific adiice regarding steps a company needs to take to 
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Canadian public and Gage sectors. Over the years, the Service has made thousands of contacts within 
Canadian industry and government. 
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Assessment of the Vulnerability 
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The protection of sensitive information and technology i isa mottos ee? nate Bhysica and 
personnel security, as well as an educational proces) the folowing are SORE bene ns if 
"AO 
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Appropriate classification, control and protection of sensitive documents; Lace SI Wis 4 o SUR 


Protection of computer databases and network links from unauthorized access; D 
Proper storage and disposal of sensitive documents; 


Discussion of sensitive idii Fn iQ ppropitit locations; 
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Sensitivity and caution with the choice of medium Peas BisinSkRom munications (i.e. cellular 
telephones, open fax and telephone lines) and; UNE. & Ge? ‘On 
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Education and sensitization of all employees to the threat that economic espionage may pose to job 
security and the organization's economic well-being. Emphasis on sharing responsibility amongst all 
employees for adherence to effective security policies and practices. 


the National Coordinator, Economic and Information Security, 
c/o P.O. Box 9732, mass | Own oar, K1G 4G4. Telephone 613-231-0100 or fax 613-842- 
1390. Fo. SO 
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Economic security is the maintenance of those conditions necessary to encourage sustained long- 3 S 
relative improvements in labour and capital productivity and thus a high and rising standard of living for 
a nation's citizens, including the maintenance of a fair, secure and dynamic business environment 
‘conducive to innovation, domestic and foreign investment and sustainable economic growth. This is a 
broad goal sought by all governments. ) 
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Economic intelligence js policyygr coimercially relevant. economic liffgemation, including technological 
data, financial, proprietary commerdiatand dovernment infdrmation the acquisition of which by foreign 
interests could, either directly or indicectly “assist Herelative prodtictivity or xampetitive position of the 
economy of the collecting organization's country. A En, ~ LO/ 6 
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Economic espionage is defined as illegal, clandestine, coercive or deceptive activity engaged in or 
facilitated by a foreign government and designed to gain unauthorized access to economic intelligence, 
such as proprietary information or technology, for economic advantage. 
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Archived Content 


information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you caeyequest alternate formats on the "Contact Us” page. 
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"Despite the best efforts of our diplomats and counter proliferation éaperf$ Ahe spread of weapons of 
mass destruction will be a defining security challenge of this new century. ft will lead to more fingerson | 
more triggers. Not all of these fingers will belong to rational leaders. In such a situation, deterrents may 
not always deter." NATO: A Vision for 2012 


Speech by NATO Secretary General, Lord Robertson 


At the NATO/GMFUS Conference, Brussels, Belgium October 3, 2002 
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The terrorist attacks on the World Trade Center and the Pentagon on September 32001 wakened 
people to a realization of the damage that an organized, motivated eneitiy could intligt c ofS eivilian 
population. Less than a month after these attacks, néws broke that several people bad bëeir intéeted by 
anthrax. Many immediately linked the two events and feats émerged that biological weapons were 
being employed by terrorists against American civilian populations. It-was' soon. gange that the mat ` 
was being used to send anthrax and the US Mail activities were interrupted as pedpleteared. opening 
their letters. The term "weapons of mass destruction" became part of the public's vorabulary, , La 


In reality, the spread and potential use of weapons of mass destruction have been an issue for many i 
years. In 1995, the Aum Shinri Kyo, a Japanese religious cult, released the nerve agent sarin in the Tokyo 
subway, killing 12 and injuring thousands. In 1998, India and Pakistan shocked the world with a series of 
nuclear tests that demonstrated the potential consequences of future conflict in the region. By May 
2002, relations between the two countries over the disputed Kashmir region deteriorated to the point 
that a war, possibly involving nuclear weapons, appeared likely. 
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These episodes demonstrate how the préliferatioti of Aucteay, radiological, chemical and biological 
weapons, commonly grouped as weapons of mass destruction (WMD), as well as their delivery systems, 
have the potential to undévmine international peace and’ security: 
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In January 2001, the United States oe of | befense, Ur its. document Proliferation: Threat and 
Response, estimated that at least 25 countries possess-or wé ÁRA ie Dëss of acquiring and 
developing-capabilities to inflict mass casualties and destruction thrdagh noélear, biological or chemical 
weapons or the means to deliver them. The Federation of American Scientists in 2000 placed the 
number of countries possessing, pursuing or capable of acquiring such weapons and/or delivery systems 
at 33. While many terrorist groups lack the resources, expertise or motivation to employ WMD, there 
has been a growing interest among certain terrorist groups in acquiring such weapons as well. 
Regardless of the exact number of parties seeking WMD or their delivery systems, such estimates 
demonstrate what a widespread and serious issue proliferation has become and the urgent and 
"og ec? to counter this threat. 
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abe Géyprnment d Conage breed to countering the spread of such weapons. Canada is a party 
(to, > vatius.intérgational agteéments which: seek to prevent the proliferation of weapons of mass 
destruction n, theig delivery s systems ‘and: companents which can be used to produce such weapons or 
systems. AS Catiada Nam ifferhationally recognized feader in many high-technology sectors (such as the 
nuclear, chemical, 1 ëtreeearl, bidtechnological, electronics and aerospace sectors), it remains a 
frequent target for clandestiné and Meit procurement activities by countries of proliferation concern. 
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Nuclear and Radiological Weapons 


Wis $ 
Nuclear weapons are considered weapons of mass destruction in the truest sense. In addition to käng, 
tens or hundreds of thousands of people or more, a nuclear weapon can destroy the entire physical 
structure of a large city and contaminate a much larger area with radioactive fallout. In addition to the 
five traditional nuclear weapons states (the United States, Russia, China, France and the United 
Kingdom), India and Pakistan have admitted their nuclear capabilities and Israel has long been credited 
with a clandestine arsenal. A number of other countries, including Iran, Libya, North Korea, and until 
recently, Iraq were widely suspected of harbouring nuclear weapons ambitions and/or to be actively 
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The basic concepts related to the development oF nuclear weapons have been widely known for some 
time and the required technology dates back to the 3940s: However; the infrastructure required to 
produce nuclear weapons indigenously is considerably morg difficultand expensive to develop than that 
for either biological or chemical weapons. This is one reason why Copcerh about WMD terrorism focuses 
more on CBW than nuclear weapons. ki 
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The greatest obstacle to a potential proliferant is obtaining sufficient amounts of fissionable material 
(highly enriched uranium or plutonium). Countries with advanced nuclear weapons programs attempt to 
acquire technologies and components that can allow them to indigenously produce such fissionable 
material, often under the auspices of a civilian nuclear power program. Otherwise, they can attempt to 
purchase à steal weapons-grade fissionable material kept in scientific institutions having research 
reactors. tits-estimated that approximately 20 tonnes of highly enriched uranium is stored in such 


"Joen j as throughdut the world. the.vulnerability of this fissile material to theft or misuse is a significant 
Er 5 pralifer ation concern at the present time. 
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Technical competi he Eat the likelihood that most terrorist groups could construct a 
nuclear explosive device. heft d Riata fclear weapon is also not considered very likely given the 
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stringent security measures in place in most of the nuclear weap6ns states/“A more key threat from a 
terrorist organization would be a radiological one involving the, dispersatof radioactive substances to 
contaminate the air or water, or to render a particutar area oy facility: unusable. Rádipaçtive materials 
that could be used for such contamination are available trém a wide range of relatively fhoWsecure’), 
facilities, including hospitals, medical and research laboratories, universities apd waste. dumps. ‘Mthough- ; 
some types of contamination may be more difficult to achieve than commonly helieved, piven the 
widespread public anxiety about nuclear material in any form, the mere threat of sueh use òfradidaçtive 
materials could be a potent terrorist tool. 
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Chemical and Biological Weapons 


Chemical and biological weapons are particularly brutal tools of death and can kill slowly and painfully. 


. Unfortunately, such weapons, particularly biological agents, are also easier and cheaper to produce than 


nuclear materials and the technology, and Know- how is widely available. As a result, there are far more 
states actively engaged in chemical and biologicatweapons programs than there are in nuclear 
programs. The Federation of American Scientists estimated that 29 nations possess, were pursuing or 
are capable of acquiring chemicatar biglogical weapens as of 2000. These countries included Iran, Libya, 


North Korea, Syria and until recently, Iraq. Ve des: 
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Chemical agents include blood agents, choking agents, plistéring agents, and nerve agents. Some 
chemical agents utilize toxic industrial chemicals and do not require much expertise to be adapted into 
potential weapons. Biological agents include bacterial, viral and rickettsial agents. An individual with 
some technical training could apply the necessary expertise given supplies and a basic laboratory to 
make a crude biological weapon. Certainly, any state with a modestly sophisticated pharmaceutical 
industry is capable of producing biological agents. Biological agents, in particular, could cause mass 
casualties if detection and treatment were impeded. 


Fortunately, thespehtening potential of biological and chemical weapons are mitigated by several 

factors, the meet itmportant being that it is very difficult to find effective, reliable delivery means for 

large- -scale lethal doses of such, agents. Many chemical agents require large quantities of precursor 
erfileal Wy ar and can require high-temperature processes and create dangerous by products, making 


Zu "pr ddeajon Suhi ide of an advanced laboratéry unlikely. If used, biological agents can be affected by 
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envirdnmental factor Including wipd, Temperature and rain. Chemical agents are rapidly diluted when 
exposed to ais A ASmurization will not guarantée the safety of those who deliver the weapon. The 
amounts of agents néietlad aletx make harge- -scale food and drink contamination unlikely and make it very 
difficult to contaminate a largé water supply Shelia smaller-scale contamination is possible. The 
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release of such chemical or biological agents through vaporizing or @erosél.deyjces has to be ina 
confined area for lethal exposures to occur. This ifditates that enclosed Spaces Suetyas drap, . 
transportation systems, sports stadiums and office compléxes,are more vulnerable‘to such attacksthan 
other more open areas. Y GA 
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There are three types of delivery systems usually considered for WMD-ballistic missiles, cruise missiles 
and combat aircraft. Among these, the ballistic missile is the greatest proliferation concern both because 
it is difficult to defend against and because it appears to be particularly suited for WMD. 


A ballistic missile has been defined as "a rocket-powered delivery vehicle that has some form of 
guidance system, that is primarily intended Jor use against ground targets, and that travels a large 
portion of its flight in a ballistic (free-fall) trajectory:""While aircraft or cruise missiles might be better 
suited to deliver chetnical or biological weapons, ballistic missiles may be ideal for delivery of WMD 
(biological, chemical or nuclear) against specific point targets or for terror attacks designed to intimidate 
a population. In general, compared tavaircraft;ballistic missiles are harder to defend against, swifter in 
their delivery, and easier to hide front onpdsing forces The may afso be cheaper to acquire and 
maintain than modern types of combat aircratt: Precisely because they appear to represent the highest 
state of technological advancement and are less corinton than aircraft, their acquisition by a state may 
be considered particularly prestigious. Thus, it is no coincidence that virtyally all states known to possess 
or suspected of developing WMD also maintain ballistic missile programmes. 
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Over a dozen states in addition to the five permanent members of the UN Security Council possess or 
are developing ballistic missiles with ranges of over 300 kilometres. Most of these counties also have 
active WMD programmes. These countries include India, iran, Israel, Libya, North Korea, Pakistan, Syria 
and until recently, Iraq. Countries of proliferation concern vary widely in their ability to produce missiles, 
exténdtheir capabilities or design new types. Practically all such states depend on assistance or at least 
purchases of a eg fram abroad; outside the most industrially advanced states, only Israel, India and 


China can be tonsidered Huy Independent in missile design and production. 
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Despitellirited Buecess in ae instances,the Missile Technology Control Regime has proven unable to 
completely md peg os ballistic missiles and the number of states acquiring such missiles 
and their production ‘apabilitywiuil) continue to grow. Of greatest concern is the situation in South Asia, 
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where India and Pakistan appedrito be involved in a nuclear ballistic missile "race" with potentially 
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severe consequences for regional and global security. The ballisti¢ missile progratisrof some other states 
(such as Iran, Israel, North Korea, Syria) are also wotrisame Because they have acqéired, e seon will 
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military forces within their respective regions and even, in’seme casts, beyond. bie Aën 
: ‘Loy, Tra, Dn AC O 
S Sty, OE Cp “Op 
UR , ‘QW, LA 74 
Canada's Role in Stemming the Tide of Proliferation Så Une SC 
ORAM 
ano Be 


The Government of Canada firmly believes that the proliferation of weapons of mass destruction and 
their delivery systems poses a significant threat to international peace and stability. While the 
immediate threat of Canada being directly targeted for an attack with a weapon of mass destruction is 
low, Canadian troops serving in peacekeeping or peace-enforcement missions, as well as other Canadian 
citizens abroad, may be at higher risk of attack. As delivery ranges increase, some of Canada's allies are 
being rendered vulnerable to such attacks against their home territories. In the longer term, as 
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proliferation increases, a few stale potentially hostile to Canadian interests could acquire the capability 
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Weapons Convention. In addition, Canada was one of the original signatories of the Chemical Weapons 
Convention. However, these treaties have not deterred npn-signatories and certain states that ignore 
their treaty commitments from attempting to acquire WMD materials and technology. Canada is also 
actively promoting the development of an effectively verifiable treaty banning the production of fissile 
material for nuclear weapons and other nuclear explosive devices and advocates an immediate and 
universal moratorium on the production of fissile materials for weapons and explosive purposes. 


Canada is also a part of several international supplier regimes and cooperation agreements designed to 
control the transfer of WMD technology and materials to countries of proliferation concern through the 
strengthening of, national export control measures, These include the Australia Group (chemical and 
biological warfare);-the-Nuclear Suppliers Group, also known as the London Club (nuclear weapons and 
related duatise technpjogy): the Missile Technology Control Regime (missiles and unmanned aircraft 


d capatite of delivering. weapons of mass.destruction); and the Wassenaar Arrangement (transfer of 
)convemional Arps and duakuse goods and technologies). 
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and illicit procurement activities by countries of proliferation codon. ih addition Canada i is a major 
world supplier of uranium and nuclear power technology. Plutonium frorn a Sanada supptied | reactor 
was used in India's first nuclear explosion. It would be highly embarrassing to Canada if Canadian 
produced expertise, materials or technology were again Used by a ‘state to-produce weapetivofim mags, 
destruction or their delivery vehicles. P Ze 
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In response to these threats and the government's security intelligence priorities, the Service has 

refocused its operations to create a more intensive, strategic investigative effort against proliferation 

and ensure timely advice is provided to the government on this threat to national security. In July 2002, 

CSIS created the Counter Proliferation Branch, which combines the expertise of both the counter- 

intelligence and counter-terror, ae fields to address the merging threat ei weapons of mass destruction. 
Obio P 


The branch fulfills its role, within the CSIS mandate, by caltecting information related to biological, 
chemical and nuclear weapons: development programs undettaken by foreign governments or terrorist 
organizations. Through exchange relationships with foreigtrgoyernments and by working closely with 
federal government departments artd agenciés;,inctuding the Department of Foreign Affairs and 
International Trade, the Department of National, Deféttce, the Canada Customs and Revenue Agency, the 
National Research Council and the Canadian Nuclear Safety Cammission, the branch is able to expand ` 
upon and share its knowledge about threats and emerging trerids in the area. 


3 


The changing face of terrorism has made the potential use of chemical, biological, radiological or nuclear 
weapons in a terrorist attack a reality. A recent case involving ricin in the United Kingdom demonstrates 
how easy it is to produce biological agents. Instructions are readily available on the Internet. Anyone 
with an undergraduate knowledge of chemistry has the skill to produce them. Since the terrorist attacks 
on September 11, 2001, Service investigations into the terrorist use of weapons of mass destruction 
iia expag, E E Service monitors all information regarding terrorist interest in acquiring such 
weapons., Die O 


Crs 
Pe of csi iitwestigations i is to forewarn government of threats to national security. 
With YA infonfeation it it gathers, the Service develops assessments of potential WMD threats within 
Canada or aga Beta dap interests, which are distributed to the broader security and intelligence 
community and to othet Federétpovernment departments and agencies. In addition, the Service works 
closely with other government departrtents a and law enforcement agencies to counter these threats. 
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The proliferation of chemical, biological, nuclear and radiological weaporis and | h - it del hen § stems is 


one of the most important security intelligence challenges facing CSIS today. The challengeis.evolving as 
more is learned about the progress being made by foreign countries in their weapons development). $ 
programs and as certain terrorist groups begin to covet the power and destructive force these weapons LS 
represent. Through its dedication to its mandate, CSIS has a vital role to play in ensuring that, to borrow ” 
from the comments of the Secretary General of NATO, we limit the number or triggers and the fingers 

on those triggers. 
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information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us" page. 
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Ensuring the safety and security of Canadians is one of the Government ofvanada’s most important 
responsibilities. With this in mind, the government has identified counter-terrorism as the Canadian 


Security Intelligence Service (CSIS) number one priority. 


-What is CSIS’ counter-terrorism role? 
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Like many other Western democracies, Canada has-its share of dividuals who support the use ot 
violence to achieve their political goals. Their activities ate often_tinked te, conflicts arouhd the glpbe and 
typically include: planning or helping to plan terrorist attacks in Canada of abroad) providing 4 Canadian e 
base for terrorist supporters; fundraising; lobbying through front organizations; abstaining ‘weapons and 


matériel; finally, coercing and manipulating immigrant communities. Se 
7; ION S 


Canada has not been immune to the more recent phenomenon of “homegrown terrorism,” which refers ` 
to the sometimes rapid indoctrination and radicalization of young Canadians into the violent ideology 
espoused and inspired by Al Qaida. 


Canada is also home to individuals and groups that support the use of violence to achieve domestic 
political goals. These individual’ Km og outside the legitimate political system. 
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CSIS’ current counter-terrorism priority is Se tier ividuals and groups inspired by the 
ideology of Al Qaeda. . ` Ms d "An i 


As an open, democratic and multicultural society, Canada attracts hundreds of thousands of legitimate 
immigrants and refugees from all corners of the world. Our country’s openness and respect for human 
rights also make it attractive to members of terrorist organizations bent on using Canada as a base to ` 
support their activities. 


nero teerarist groups have been active in Canada for years but, more often than not, they were 
engaged į in Herre such as fundraising or BER matériel and equipment. 
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nahe, Durée, the tans has evoived, and Canadians and Canadian interests at home and 
abroad’ ate at GT og, Canadian E ‘or Tasidents have been involved in terrorist attacks or ` 
planned attacks Cand abrdad, 0 or have been victims of terrorist activity outside of Canada. 
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What legal tools are used to counter terrorism? L4 L REN S TU D On ACAND, A 


CSIS operates under the authority of the CSIS Act, which provides a legal mandate to investigate Geif 
individuals or organizations suspected of involvement in political violence and terrorism, regardless of >) 
where the threat to Canadian security originates. Although CSIS is not a law enforcement agency, and ` » 
has no powers of arrest or detention, it works closely with law enforcement agencies across Canada to 
strengthen public safety. 


The Royal Canadian Mounted Police (RCMP) and other police forces use the Criminal Code and the Anti- 
terrorism Act. The Anti-terrorism.Act provides measures to deter, disable, identify and prosecute those 
involved in terrorist activities or supporting such activities, and makes it an offence to knowingly support 
terrorist organizations, whether through overt violence, or by providing support through 
documentation, shelter er funds, ab has noanthority andér the Anti-terrorism Act. 
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Canada is not a place where people are killed or injured b terro z, N, 
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Canada does not provide a base for terrorists to plan acts of terrorism, either in Canada or abroad; 


Canadian institutions are protected; and 
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In the course of CSIS investigations into threats to the security of Canada, the Service relies we EN 


on the voluntary cooperation of members of the public. CSIS may use surveillance to monitor the 
activities of individuals of interest. The Service may also obtain Federal Court warrants which allow the 
use of other investigative techniques. 


Threat Assessments 
"POV PA 

ong? Or ‘ 
The Integrated Threat‘Assessment Centre méi. housed. at CSIs Headquarters, is a government centre 
staffed by representatives from, government departnients, agencies and police forces. ITAC produces 

comprehensive, integrated threat dssesqments, ayhich are ‘Gistyi-putert w ithin the intelligence 

community and to relevant first- -line-réspondarg prta timely basis. e Eägments allow the 
Government of Canada to more effectively coordinate activities in response to specific threats in order 
to prevent or mitigate risks to public safety. 


Security Screening 


Under its Government Screening Program, CSIS provides security screening services to federal 
departments and institutions. The Service also performs “site-access” assessments of individuals seeking 
employment at airports and nuclear power stations and in the federal parliamentary precinct. The 
Servic tbys helps joe ensure that individuals with terrorist connections do not obtain access to our 
country’ sensitive sites, or.classified information. 
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The CSIS Act gives CSIS the authority to share information with the REP deg othiér polite authorities to 
assist them in their criminal investigations. The June 2006 arrests of 17 individuatsinthe ’ Toranto area 
were the result of an RCMP investigation based on CSIS lead information CSIS also provides input Se vi 
Canada Border Services Agency’s Enforcement Information Index, an automated system that alerts), 
immigration and customs officers abroad and at ports of entry about security threats posed by 
suspected and known terrorists seeking admission to Canada. CSIS information enables Canadian 
immigration officials to refuse applications from individuals suspected of involvement in terrorist 
activity, effectively barring their entry into Canada. 
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In Canada, CSIS works iddy ih other government depiirements and law enforcement agencies at the 
federal, provincial and niubicipaHeve}st Zen to ii threats and incidents. 
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The CSIS Act allows the Service to enter into an potas ety a foreign agency, silt after the 
Minister of Public Safety, in consultation with the Minister'of Forelgn Affairs, have approved the 
arrangement. Currently, the Service has about 270 cooperative relationships with more than 145 
countries, giving it access to global information and intelligence on potential terrorist threats. 


Advice to government 


The primary goat, of intelligence-gathering i is to provide timely and accurate information, analysis and 
advice to goverment Palicy-makers through detailed reports, studies and briefs on issues related to 
Pp ae ar ely, and public ‘safety. CS tactical analysis combines intelligence gathered by the Service with 
e att from other sources, including government agencies and other intelligence services, while its 
x. ‘Ostrgtéate analfsts piers comprehensive, policy-relevant intelligence assessments to government. 
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Under the provisions of the Anti-terrorism Act (AFA), CSIS may pravide advice tothe government with 
respect to the listing of terrorist entities. The consequentas of being. listed entity are "ae: first, ia 
listing process is public; second, a listed entity is automatically conisidereda: ‘terrorist group’ by | 
definition, and the Criminal Code clearly spells out the sanctions for those dealingayith’a terrorist group; 
and third, the assets of a listed entity may be immediately frozen. Sor. l4 


Since the creation of the list, CSIS has contri-buted to listing 40 entities, including Al Qaida the Liberation” 
Tigers of Tamil Eelam and Hizballah, groups which have operated or had supporters in Canada for many 
years. 


The United Nations (UN) also maintains several lists of designated terrorist entities. Much as with the 
ATA list, the immediate result ofbeing listed pursuant to the UN regulations is public identification as 
being associated with terrorism, an iesst: freeze of assets and prohibition of any fundraising efforts. 
CSIS’ role is to provide advice to the ‘Department of | t Forelen Affairs and International Trade, which is 
ultimately aan EEEE international] gbligations Va ai to UN resolutions. 
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CSIS is considered by many to be the most externally eleng acte Siten service in the world. 
In fact, the CSIS Act, enacted in 1984, served as the model for subsequent (dgislation for the Australian 
and British security services 


CSIS operates within a strong legal framework, which allows the Service to carry out its activities while 
a protecting the civil liberties of individual Canadians. 
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While CSIS may enter into arrangements with foreign countries and agencies, it may ert do Sy ywjth the 
approval of the Minister of Public Safety in consultation with the Minister of Foreign Affairs. RAY. S 
information shared with those foreign agencies is accompanied by various caveats restricting pth the 7S 
use and further dissemination of that information. CSIS has also developed a new caveat, which seeks ` 7 =f 
assurance that any Canadian citizen detained by a foreign government will be fairly treated within the 
accepted norms of international conventions, and that he is accorded due process under law and 

afforded access to Canadian diplomatic personnel, if requested. 


Furthermore, the Security Intelligence Review Committee (SIRC) has the mandate to review the Service's 
operational activities, to assess whether H Service: actions have been carried out in accordance with 
the laws of Canada, directions from the Minister ånd-CSIS operational policy and to inform Parliament 
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Of course, like all federal agencies, sts, ig. ald/syb lect ee Government pf Canada laws and regulations. 
The Service has been audited by the Auditor Generat'egffite; complies with the Access to Information 
Act and the Privacy Act; has appeared before the Cariadian Haman Rights Commission to respond to 
complaints; and has testified at public proceedings including the-Q’Connar Commission into the Actions 
of Canadian Officials in Relation to Maher Arar and various Federal Gott hearings. 


ay 


The full spectrum of legal and institutional mechanisms in place ensures that CSIS does its work in a way 
that respects individual liberties, while maintaining its ability to investigate potential threats to the 
collective security of this country. 
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Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us" page. 
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The Security Screening program is one of the maia operational responsibilities of Canadian Security 
Intelligence Service (CSIS). The goals of the program are to/prevent noh-Canadians who pose security 
concerns or risks from entering or receiving permanent residence in the Country and to prevent anyone 
of security concern from gaining access to sensitive government assets, {ovations or information. The 
Security Screening Program is one of the most visible functions undertaken by CSIS. 


The September 11th tragedy in the United States has refocused attention on the requirement for good 
security screening procedures throughout the Government of Canada. In the December, 2001 budget, 
the Government of Canada announced substantial increases in funding for CSIS over the next five years. 
Mach Mutt iné?epsed budget has been earmarked towards both government and immigration 
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The Government Screening Program provides security assessments for al government departinent’ da 
institutions, with the exception of the Royal Canadian Mounted Police. The Service, alsoshas a site access ` 


program for airports, the Parliamentary Precinct and nuclear power stations. ‘These programs assist in in 
enhancing security and reducing the potential threat from terrorist groups and foreign gayerninents 


which seek advantage from gaining access to classified information or other assets and materiet since’ | 


September 11, the demand for CSIS advice has risen dramatically. 


The majority of Government Screening resources are devoted to federal government departments. 
Under the Government Security Policy (GSP), federal employees, members of the Armed Forces or 
persons under contract to a government department who in the performance of their duties have 
access to classified government assets or information, are required to hold security clearances. 


There are three levels ‘Ofsecurity clea Lance a& defined by thease: Confidential (Level I), Secret (Level Il) 
and Top Secret (Levelt). The Ievel of Security clearatige required is determined by the need for access 
to classified information or assets in the pertetmance of duties assbciated with an individual's 
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Level | and II security clearance requests, which are conducted elēçtronically, require checks in CSIS data 
banks. Most result in a recommendation to grant the clearance being made to the Departmental or 
Agency Security Officer (DSO/ASO). Further enquiries including an interview with the subject or a full 
field investigation may be required at times, if the process reveals questionable information. A full field 
investigation is required for all Level Ill security clearances. 


A field investigation includes CSIS records checks, the interview of friends, neighbours and employers, 
local police spethaend possibly an interview of the applicant. During the course of the enquiries, every 
effort is made to explain the purpose of the questions being posed and participation in the interviews is 
CEG MF y 
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The securtty)sce ae bens may redea ¥éinformation which would lead CSIS to recommend 
that the requests TERIA ‘Wenied, In other cases, CSIS may advise the DSO/ASO of information 
which, while being of conde, slay he ifsotficjent to warrant a recommendation to deny, but would 
nevertheless require epes Wang amer action. While the Service assists the 
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In 2003-2004, CSIS received 37,327 requests for site and airport access, Atotal of 37,508 security 
clearance requests were received for government departments and agencies'‘in it @ the Department 


of National Defence (DND). For areas of the federal government, other than DND, the’mediar time A 
required to process Level | applications was seven days. Level Il applications required 11 day549 process Sa. 
while Level Ill took 82 days. Times required for DND were 20, 18 and 96 days respectively. "SS 
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Foreign Screening 


CSIS has reciprocal screening agreements with the governments of foreign states, foreign agencies and 
international organizations which provide Hem with security assessments. These agreements are all 
approved by the Minister of Public Safety and Emergency Preparedness after consultation with Foreign 
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All persons affected by this procedure provide their agreement in adarte. requests for foreign 

screening typically fall within two categories: datàbasë checks aticenquiries on Canadian residents 
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wishing to take up residence in another country; or field checks-and_enqujries on former and current 


Canadian residents who are being considered for classified access in another country. 
ony 


In 2003-2004, the Service received and processed 1,208 requests for security assessments in its Foreign 
Screening Program. 
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Working closely with Citizenship and Immigration Canada (CIC), the Seryice’stmmnigiation Screening 
program's primary task is to provide security-related advice to-CIC. The objective 4s kopre Á or persons 
who are inadmissible under the Immigration and Rere Propan Sak (IRPA) flooyventeting or @dining 
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One important change, that has been introduced in the past few years, from a security D gien ifit 


~ 


of view, is the adoption of Front End Screening (FES) for all refugee claimants to Canada. FES, ON Aye, 
government initiative to ensure that all refugee claimants arriving in Canada are checked against CIE wi 
and RCMP records before they are sent to the Immigration and Refugee Board. The initiative was 
implemented to identify and filter potential security and criminal cases from the refugee claimant 


stream as early as possible in the determination process. Prior to FES, CSIS did not screen refugee 


claimants. 


In addition to its new responsibilities for Frant End Screening, the Service, for many years, has had the 

| responsibility for conducting security screening of immigrants and refugees who apply for permanent ` 

residence status front both within Canada-ahd outside.Canada. CSIS provides advice to the Minister of 
Citizenship and Immigration velated directly to the security jnadmissibility criteria contained in the 
Immigration and Refugee Protection Act. ESIS also provides CIC with security assessments on applicants 
for Canadian citizenship. CIC forwards all applications for citizenship ta CSIS for review. The Service ` 
advises if any security concerns relating to ®particular.application surfaced in the course of its checks, 
and provides CIC with relevant security advice if such con¢erns.come to light. 


from CIC. In 1996-1997, the Service began to receive its trace requests related to citizenship applications 
through an Electronic Data Exchange directly from CIC's Case Processing Centre in Sydney, Nova Scotia. 
Beginning in November 2001, CIC has also made available an input process for all immigration officers in 
Canada, enabling CIC front-line officers to send data to CSIS electronically, greatly facilitating the front 
end screening process. Screening requests for immigrants applying to CIC from within Canada are now 
all conducted electronically between the Service and CIC. Requests related to immigrants applications 
from outside of Cattada traditionally took longer to process since such applications were sent to the 
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Over the fiscal year 2003-2004, the Service received some 44, 907: request’ for Arnintigration Screening 
from within Canada (including RDP) and issued 46,183)security clearance assessments, Additionally, the 
Service received some 24,243 Immigration Screeningrappli¢atigns from, outside Canada ahd 4 „646 from 
the United States for a total of 73,796 immigration cases. The median tumaround time Waa? das r 
(through the Electronic Data Exchange Program) for requests from-within Canada. Under the Overseas 
Program, our Security Liaison Officers were consulted on 4,814 cases. ‘Lac OMe < £O; Si ; 
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Citizenship Screening is conducted on the basis of threats to Canada's security as set out in s.19 of Wäi 
Citizenship Act. Over the past years, 203,356 citizenship requests were received from Citizenship and 
Immigration Canada. 


The Front End Screening 
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The Hon. Lawrence MacAulay, former Solicitor General, News Release, April 15, 2001 


"The RCMP have the lead Federal role for combatting crime, but | believe that the increasing threat of 
transnational crime - notably the illegal traffic of drugs, people and the laundering of money across 
international boundaries - means that the REMP and CSIS have to marshal all their resources in a 
cooperative and integrated fight against these setting 
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CSIS specifically has a role to Ben ekchangitig information With, other countries and providing relevant 
criminal information and strategic artaljsis.to banadis aw eg agentes.” 
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The Hon. Andy Scott, former Solicitor General, Speech to the "ae? i1998 
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Ap Improvementaant ais ration, computer and communications technology have made the world today 
ee mut hajer than it’ Wag 50 VeRts ago: intercontinental travel which used to require days or weeks now 
Ke rakes! blac in Boyrs. The formerly, datinting noten of conversing or conducting business with someone 
halfwayar pp the pfobe,is now a mause-clidk.or a telephone call away. This globalization has created a 
world virtually devoid ot natioral borders. Unfortunately, these changes have also made it easier for 
members of highly sopitisticatdéd anti ofggnized criminal syndicates to pursue a complex Web of 
lucrative legal and illegal activities worldwide. l 
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UN estimates place the cost of this transnational criminal activity bn developed states at two per cent of 
annual gross national product (GNP). The potential transnational crime-tdlated losses for Canatia nh 

1995 would have been about $14.8 billion, based on a GNP of Soa billion: Figures jike this led the 1998 — 
G8 summit in the UK to label transnational criminal activity one of the three majot challenges facing the 
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world today. À ine PERL 
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Transnational crime threatens various aspects of Canadian national security, law and order, the integrity 
of government programs and institutions, and the economy. Accordingly, the Canadian Security 
Intelligence Service monitors such activity under its mandate to investigate foreign- influenced activities 
detrimental to Canadian interests, as set out in Sections 12 and 2 (b) of the CSIS Act, in order to provide 
strategic advice to government on how to deal with this immense problem. Given the global nature of 
transnational crime, the Service's work in this area includes a great deal of cooperation with law 
enforcement agencies and othes intelligence services. 
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ARRO, illegal gambling, loan-sharking and extortion’ These organizations generally controlled 
specific territories, did not usually attempt to operate outside their spheres of influence and only rarely 
cooperated with other syndicates. in the 1950s for instance, a Sicilian mafia‘family in Palermo would 
require permission to operate, however briefly, in another family's zone even if that zone were only a 
block away. 


Today, organized crime is no longer limited to street-level activity. Contemporary organizations are 
adaptable, sophisticated, extremely opportunistic and immersed in a full range of illegal and legal 
activities. While still involved at the lower level with drug trafficking, prostitution, loan- sharking, illegal 
gambling at extdrtinn, they have expanded their activities to a quasi-corporate level where they are 
active in large-scale insurabce- fraud, the depletion of natural resources, environmental crime, migrant 


“AY smuggling, bank Faul, gasoline tax/fraud and corruption. In addition, their frequent use of money 
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ittdeytheir illegal ventures to fund legitimate ones allows them to launder money and earn even 


i A 
méré profi: Theva / many of their criminal tactics in these legal business operations, never 


hesitating tOluse viblence armyrder to get.ahead. By way of illustration, the media have taken note of 
the deaths of a ieren mumbee" of people who opposed a campaign by a company-believed to be 
affiliated with a Russian/Eastern European transnational criminal organization-to gain control of 40 per 
cent of Russia's aluminum trade. Trafsnational criminal syndicates are not afraid to work globally in any 
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country where legal or bureaucratic loopholes allow them to take ady nitage: ear em. As with 
international corporations, these organizations are quite wiling to work Seetei:  Bategeg for 
the use of each other's unique talents to accomplish specific tasks, ortg make logate: d we E 
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There are approximately 18 active transnational criminal organizations represented in Canada, including 
Asian triads, Colombian cartels, Japanese yakuza, Jamaican posses, Mafia groups from the USA, Calabria 
and Sicily, Russian/Eastern European mafiyas, Nigerian crime groups and major outlaw motorcycle 
gangs. In recent years, a great deal of media attention has been paid to Russian/Eastern European based 
organizations. 
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Organized crime in Russia and Eastern Europe began i in the AAEM days of the select group of 
criminals known as the vory v zakone; the Thievésin. Law, who controHed the’ etininal underworld. The 
vory existed only to steal and rejected legitimate: society’ entirety. Most of the Thieves in Law were 
imprisoned in the gulags during the Soviet era, but they came back to thrive in the chaotic atmosphere 
that followed the lifting of the Iron Curtain in 1991. Today, these older criminal fraternities are joined by 
the new and younger "bandit" organizations which are concerned only with, po and not the thieves' 
code. 


Although estimates vary widely, it is generally accepted that 5,000 to 8,000 criminal organizations with 
as many as 100,000 members control between 25 and 40 per cent of Russia's GNP. The Russian Interior 
Ministry (MVD) estimates that these organizations control 40 per cent of private businesses, 60 per cent 
of staté-twned enterprises and between 50 and 80 per cent of banks in Russia. According to the MVD, 
approximately 300 | Russian. and Eastern European organized crime groups operate transnationally in 
various areas, GE fg extortion, fraud, murder, illegal gambling, loan sharking and alien smuggling. 


Ey, ‘aor Key: oreas, however, form the; foundation of their global criminal power: narcotics trafficking, illegal 
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Jims deing, Mmôhey launderingand thé export of Russian natural resources. 
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Given that they attack the very fabric of life in a dëmactatiç,/law-tfased society like Canada, the iMegal 
actions of transnational crime organizations threaten law-and, order, directly affecting people's sense of 
security, trust, order and community-the very underpinnings of Canadian 4ociety./They regulafly’ o y 
attempt to corrupt public officials with large amounts of money, thereby jeopatdiejog. thei integrity of 
government programs and institutions and forcing governments to spend more of thejr shrinking l4 
budgets on enforcement. Adding to the increased enforcement expenditures and the butden.on the 
criminal justice system is the fact these activities often result in social costs with long-term effet, ep, "/ 
drug dependency and a rise in violent crime. “my, 


Transnational crime also poses a serious threat to the economic security of the nation in that its basic 
activities could undermine the workings of the free market economy. Due to their illegal activities, 
transnational crime groups have access to huge sums of money, which needs to be "washed." This large- 
scale money laundering has an impact on the operations of legitimate financial institutions that, in the 
iong term, can go beyond the busitiesasector with negative effects on the investment climate, tax 
revenues and consumer confidence. Moreover, shese Jorge amounts of money, combined with a 
willingness to use idee, enables transnational crithe organizations to bribe, extort or coerce 
employees of financial institutions and governments. "Zou 7 He 


International and Canadian Efforts taco eme EI Sy 
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At their Summit in Birmingham, England in 1998, the G-8 leaders sowed hee the fight against the 
world-wide problem of transnational crime which, they declared, threatens "to sap (economic) growth, 
undermine the rule of law and damage the lives of individuals in all countries of the world." 


In May 1998, the Solicitor General of Canada stated: 
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"Because d o) ie eegen manifestations and because it transcends our borders, it... calls for 
Hoh intern in) oo Lo, pO single person, no single country can stop the daunting flow 
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In August 1998, he Zoe men s commitment to combat these activities, stating: 
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"To fight the menace of organized crime, we need nothing short dfa stratégie paréiership between the 
federal government, the provinces, the territories, and the police community Zäre: Gap bring our 
combined weight to bear. If we succeed, we will have forged ayparthership ve" ek, 
and will take the fight against organized crime to an entirely new level," e ri 
ge" 4, Del? Zo 
"He SY, 
Canada has been working in the G-8, the United Nations and the Organization of anehe Stent 
develop and promote international standards. On May 14, 2002, the Canadian government r ratte tthe, 
United Nations Convention against Transnational Organized Crime (TOC) signed in December 2000. the, k S 
TOC Convention, and its related protocols on migrant smuggling and trafficking in women and children, 
provides all countries with a shared framework and legal tools to enhance international cooperation. 
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Cooperation at the interdepartmental, intergovernmental and international levels is needed to fight 
these transnational crime organizations which work outside the rules, can be ruthless in carrying out 
their policies and are not democratitally See fe for their behaviour. 
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Law enforcement agencies in Canada have the ead role inthe fight against transnational crime. For this 
purpose, they collect both tactical and strategic intelligence. Tactical intelligence i is a primary concern of 
law enforcement as it is operational in nature and is geared ‘towards, action in the field, leading to 
arrests and prosecutions. The collection of strategic intelligence, howevet, i is atso important for Canada's 
police agencies. This type of intelligence is long-term in nature, provides a comprehensive view of a 
threat environment, assesses the extent of the threat and points out which areas are at risk-all of which 
allows law enforcement to advise government and to be pro-active in its efforts against transnational 
crime. 


It is in thearea of strategic intelligence that CSIS has a role to play. Many criminal groups with 
transnational capabilities pose a threat to Canadian national security, undermining many of Canada's 


? _ Strategic Intereste, 1 undeterréd, these threats can manifest themselves in higher health and welfare 


Coete assd¢iated with thé.consumption ard, trade in illegal drugs, the erosion of the Canadian tax base 
through fast-revenes ı due to nohsreported, illegal business activities, the undermining of Canadian law 
and sovareignty/ Sud the erosion of publi¢ confidence i in Canadian government institutions and the 
Canadian busitidsécomfnumity: The Service also cooperates with other democratic governments which 
have tasked their intelligence ‘services Lrelp combat this threat and exchanges information with allied 
intelligence agencies. De, 9 e 
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It is through this collection and subsequent analysis that the Service fulfills its mandate ta provide.the 
Government of Canada with strategic intelligence on threats to Cavada's national security-jn. this T. 

instance, the extent and nature of transnational crime in Canada, The Service's ebltgction of strategic 
intelligence can also have an important benefit for law enforcement agerities, 4s 451S 1$often able to 


provide them with timely, "spin-off" tactical information. DAT UR 
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The Service created a Transnational Criminal Activity unit in January 1996, as part of a government- wide ” 
effort to combat this threat. This unit draws on the Service's operational and strategic analysis resources 
in order to collect intelligence related to transnational crime. 


Trends in Transnational Crime 


Cyber-crime has already emerged as a proven. weapon.inthe,arsenal of transnational criminal 
organizations and it isexpected to play a bigger rale Ip years to come, The growth of global, 
computerized financial nétworks tas allowéd these organizations to tauinder the profits of their illegal 
ventures quickly and easily throughitransaétions that are instantaneous and virtually untraceable. The | 
United Nations estimates that at least $200. billion i9 drug money is laundered every year largely via 
international electronic bank transfers. An estimated $3 billion to'$10-billion is laundered in Canada 
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every year. DW ue, NRSO 


It is also believed that transnational criminal organizations have, or soon will have, the capability to use 
computers for a multitude of other illegal activities: for instance, "hacking" or "cracking" into the 
computer systems of corporations, accessing valuable information and then extorting the corporation 
by threatening to destroy the data. More conventional than cyber-extortion, cyber- theft will continue 
to be a problem. 
NM =) 
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T Legitimization js another trend gmong transnational criminals. Some are attempting to distance 
K- "mbehusëkues from the’Wegat aspects-of their operations by involving themselves in legitimate business 

“oypintutes, d'Srate funded bythe almost bottomless profits acquired through their criminal activities. 

Othérs seek civig|e Dëse by makittg donations, to community hospitals, charities, universities and 
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political paities: Th y also, rum have their photographs taken with high-ranking government officials or 
other high-profile perSonalitiés,: ve SY 
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Cooperation among transnational crime organizations, already a majoe- factor inthe new world order of 
crime, is expected to continue and expand. Partnerships, bartering arrangements afta lines, e either 
short or long term, allow these syndicates to better’ evade law enforcement Tee ‘share existing 


infrastructure and to improve risk management. < OA; vA GER 
“4 Log PENG ms AG > Op 
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Sophistication, already a quality of transnational crime, is expected to increase. For irf Sg L4 


members of transnational criminal organizations have university educations in the fields of ee Mey 
accounting and law, better equipping them for the complex world of transnational crime. 
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Outlook 


Given their sophistication, adaptability and opportunism, transnational crime organizations will likely 
continue to pose a threat to Canada's/nationa}, security. Their wide-ranging activities have far-reaching 
detrimental effects on Canada's system Eed A of life. 

ele EI SC Ce 
Given their long history of survival ante such na nature op their dpérptions i in Canada, it is believed 
-these organizations will continue and likely erën theif activities here; further thallenging Canadian 
social, political and economic institutions, as wefas ‘those elsewhere i in the world. 


De, Eine 
In order to minimize the threat to Canada's national security from this de, global threat, the 


Service will continue to investigate and report on the activities of foreign-based transnational criminal 
organizations in Canada. 
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Backgrounder No. 11 has been archived. € d Ka R VER, “Ano, 
Archived Content 


Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us" page. 
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With the advent of the personal desktop computer in 1980, the manner wich the public and private 
sectors conduct business and provide services to the public at large has changed. Over time, millions of 
computers and thousands of dissimilar networks worldwide have been connected through a global 
network of networks. Internet use has more than doubled annually for the last several years to an 
estimated 40 million users worldwide in nearly every country today. Connections between computer 
systems are growing at an ever-increasing rate, with the Internet adding a new network about every 30 
minutes, According to a report by the Computer Industry Almanac, nearly 43 percent of Canadians use 
the Int ids vue Canada the leading country for Internet use. 
g NS Oe SSE 
"o fie "ës 79 Me se ie, 
“Teffte Beowinedenendence Otgoyerkinents, institutions, business, groups and individuals on computer- 
based £ J if i icatiéns and information technologies has resulted in a constantly changing view of what 
constitutes thre it iStoday’sinformation-age" tino longer necessary for "hostile actors" 
(individuals, extrémiskand Ierd groups, intelligence services and armed forces) to directly access a 
computer to copy, destroy op maripilate Gata, People can use a variety of techniques and software . 
tools to exploit a targeted system once thiéygain unauthorized access remotely via the Internet or by 
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dialling directly into the system using a telephone and a modem. Mast legislation arid protective 
measures address physical attacks on critical systemsand data: however, they have beet or are in the 
process of being revised and updated to deal with the new class of computer-based threats efined as 


Information Operations (10). & ‘ Lo yy 
WéI dee De, "or OR 
aco Mane Sup 
Information Operations A Lin, PER l4 
F Op Son . 
Mary ELS 


The concept of IO has its root in that of "Information Warfare" (IW), which is the physical and computer- 
based operations used by military forces to compromise the access to and viability of information 
received by the decision-makers of an enemy, while at the same time protecting their own information 
and information systems. The term "Information Operation" (IO) is used to denote the use of IW tools 
and techniques at any time. The definition has evolved to reflect the need for a state to maintain 
national security by protecting its critical information infrastructure (CII). The eight critical sectors in a 
state's infrastructure include: tranisppytation, oil and gas; water; emergency services; continuity of 
government services; banking and finance;\etect Hat power; and telecommunications. 
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tools and techniques that could be used to degrade notonly ititary systems but those of government 

and the private sector as well. NED 
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Within the realm of IO, there is no safe haven; territorial boundaries become irrelevant as IO can be 
conducted at any time against any sector (public or private). All other "cyber" activity (cybercrime, 
cyberterrorism, cyberwar, netspionage, hacktivism, etc.) is a subset of IO. However, most discussions 
relating to the use of computer-based tools and techniques in the context of IO have come to focus on 
information assurance and the protection of computer-based systems and networks from an intrusion 
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Information Operation cdl be user to target national information systems from anywhere inthe ~ 
‘world using inexpensive hardware and software. Degradation in the operation of a targeted computer 
system could cause significant sëch ach Kat: ind economic impact that would have serious 
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ramifications in the area of national security. Although security méasyres ge beiingcreated to protect 
these infrastructures, the development of attack tools to circumvent these rett mediares is is 
ongoing and such attack mechanisms have come to be fréely available through Zait, 7 € 


number of intrusions into computer-based systems is on the rise and'the tools used to exploit € GH 


vulnerabilities are growing in sophistication. Although only a small number of system intrusions are’ 
reported, indications are that the level of reported incidents and vulnerabilities is doubling roughly 
every six months. In 2000, statistics released from the Computer Emergency Response Team {CERT} at 
Carnegie Mellon University in Pittsburg show that 1,334 computer security incidents were faported d 


world-wide in 1993, compared to 9,859 in 1999 and, in the first three quarters of 2000, the number of Lé 


incidents rose to 15,167. 


The threat of unauthorized intrusions into computer systems and networks increases proportionately to 
the degree of connectivity to external networks such as the Internet. Such connections create 
vulnerabilities that can be exploited, for whatever reason, by hostile actors, using malicious software, 
e.g. viruses, Trojan Horses and worms via the Internet. In addition, physical attacks like cutting power 
cables or destroying hardware upon whith the information infrastructure depends are the equivalent of 
physical denial of service (DoS) attacks: The lattér preverits authorized users from gaining access to 
information systems and data, Any of these hostile actors.can attack vulnerable infrastructure points 
using physical means and/or software. Asa result, the growing capability of a variety of hostile actors to 
make offensive use of IO, in both’ its physical and: ‘tonphysical forms, tan A cal threaten the public 
safety of Canadians and the national security of Canada. LA 
Laon + VE; 
Lë Så 
This is especially true since international affairs, in all their dimersföhs, will increasingly involve 
competition for control of information networks. Discussions at the United Nations on the topic of the 
proliferation of IO tools are couched in the rhetoric of weapons proliferation. The language has evolved 
from mass destruction to include IO tools and weapons of mass corruption. The increasing reliance of 
states on computer networks makes critical infrastructures attractive targets for attack and exploitation, 
and many countries have embarked on programs to develop IO technologies. According to American 
military and congressional! reports, Russia, China, India and Cuba have acknowledged preparations for 
cyberwar and are actively developing IO capabilities; North Korea, Libya, Iran, iraq and Syria have some 
10 capabilities. Even though many countries are developing IO capabilities, few have the means to fully 
integrate verlour toels into a comprehensive attack which would cripple a country’s infrastructure. 
owner somite ‘opuld develop th RFS uired abilities to mount such attacks over the next decade. 
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The development of IO tools and techniques is evolving | in pace vite af tno change in 
the communications and computer industries. The tality t to >“eammunicate day, sre lthengtworks 
worldwide almost instantaneously has created bot advantages ar and epes, wéi acs 
Lays wl ON dag, 
Deler. "Er "D 
As government departments and businesses globally have experienced ae Hint thin, o, 
networks and the loss of sensitive information, they have attempted to install security apaura ` 3 
protect both systems and data. Unfortunately, these security packages have a short life sparsa V, 
and intrusion assessments conducted by private-sector security firms and by government agencies lon ` 
worldwide indicate that a large number of security packages and monitoring tools, many of which are 
commercially available, are ineffective or misused. A number of surveys conducted in the United States 


AN 


and the United Kingdom indicate that more than 80% of respondents in one case did not use firewalls or 
any other security measures to protect their systems and data. Up to 93% of respondents in another 
case were vulnerable to rudimentary attacks even if firewalls were used. 
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As more and more persons, businesses. and goyerrnment departments become dependent on computer- 
based communications and the operations et interconnected networks, the configuration of interacting 
computer networks a nd, Opérating systems becomes more camplex and creates vulnerabilities. Natural 
forces (like storms), the natura}. evolytion EI network processes, andi tools could pressure these 
vulnerabilities and cause failures ‘thay equid fave a ‘profound effect, both Hort- and long-term, on the 
operation of government and the private Sector, For example, during the 1998 ice storm in Quebec and 
eastern Ontario, the destruction of the essential électrical power iħfrastructure cascaded into a 
disruption of key services such as water supply, financial services, telegommunications and 
transportation, with devastating consequences for some Canadians. fi 


Examples of Information Operations 


- Many examples of lO-related activity can be drawn from the experience of American government 


departments dealing with computer intrusions and system exploitation. These experiences have been 
related in speerhes given.before Senate and congressional committees, and in documents produced by 
the General Kècounting Office), 
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Extremist ët: Ghana groups and (governments are acquiring expertise in the area of iO and 
could threaterrVarlous 8 they possessed the proper tools and techniques to exploit 
vulnerabilities, and dingen Y Ié doso: Testimony provided during committee hearings held within the 
United States revealed that an "uereg age of countries have or are developing offensive IO 
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programs. Further, data indicates that an increasing number of extremist groups and jntelligence 
services are becoming proficient in the development and / of use of IO toolé ang technjques. A number 


_ of these hostile actors may intend to use IO tools to achieve specific goals. Recent media reports’ 


indicate that protected military networks in the United States havé been easily hacked úO si AND 
rudimentary tools. One American government-sponsored exercise {Eligible Receiver) demonstrálenhat Op 
software tools obtained from hacker sites on the Internet can not only degrade theaper Asof 


government departments but threaten the critical infrastructure. "7 d l WE 
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In April 1998, hackers belonging to the "Masters of Downloading" (MOD), which an international 
membership, claimed they had broken into NASA and DoD classified computerized systems, having 
acquired the means to access these systems with impunity, and to control military satellite and other 
systems. With at least two Russian members, MOD was considered by computer experts to be more 
secretive, careful and sophisticated - and hence more dangerous - than Analyzer. MOD threatened to 
sell information about American systems to terrorist groups or foreign governments. MOD members 
allegedly communicate using afr, orate Guster of passwords and cover their tracks by routing 
messages through a variety of computer systetnicn all, over the world. Claims made by MOD have not been 
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In February 2000, national ege suffered degradation (pi vn and, distributed denial of 
service attacks (DDoS). The attacks, whiclr centret diva hariber of companies, each witha significant 
presence on the Internet, were estimated to have caused damage in the order of billions of dollars. The 
subsequent infestation of computers around the world with GEM tove You" virus had even a more 
profound effect on systems and networks. This was due in part to the-fact thatthe phrase "I Love You" 
in the subject line of an e-mail message was a simple psychological operations ploy that enticed many 
individuals to open the virus-laden e-mail attachment and infect their computer systems. The DDoS 
attacks of February 2000 acted as a proof of concept demonstrating that a number of computers 
previously compromised by hacker activity could be used in concert to focus attacks on a single target or 
a number of targets. 


politica’ Teen have.resulted i in hacking duels between hacker groups and others in various countries. 
In 1999, tere weFechackinid-exchanges between China and Japan over the issue of the Nanking 
Cmassarte, between China end, Taiwan, and between India and Pakistan over Kashmir. In 2000, 


& >) Armenians wased false information in the Azerbaijan daily Zerkalo, and the current tensions between 
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irae ar and ‘Patestiniatsresulted í in hacking activity by supporters of each side. The latter activity on the 
part of pro-Palestinian supporters expanded to include corporations and a pro-Israel organization in 
North America as tatgets. Eny £0, S 


P 
© "ze, PR 


Protection of the Canadian Critica! Infrastructure l ACO 
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_ The Report of the Special Senate Committee on Security 5 Le gen, published i in aide , , 
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the issue of protecting Canada's critical infrastructure. The latter consistsof both physical and cyber 
based systems which are essential to the day-to-day operations of the econoiyand Bavernment.. 
Historically, elements of this critical infrastructure were physically segregated. However, these @lenients 
gradually converged, became linked and more interdependent. Advances in computer and | x 
communications technologies resulted in a growing level of automation in the operation of critical “© 
systems. The report stated that the growth of, and our increased reliance on, the critical infrastructure, 
combined with its complexity, has made it a potential target for physical or cyber-based terrorism. 


In its recommendations, the Committee suggested that the government take action to protect the 
critical infrastructure and to: 


Zi 
develop policies and Brey, wit ayant, Wo, 
í Toe "i JD > Vises ef O 4 
UD N pn. SN y, 
E SC "Sr, ON; d , We 

create the capability to assess and biti Iperabilties, /and í tb/érevent or respond to 
physical and cyber attacks; : Si te, >. 
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create public-private sector partnerships to protect the critical baste Din a 


ensure that the National Counterterrorism Plan regularly be reviewed and updated, especially relating 
to the impact created by new and emerging technologies that may be used by terrorists 


"one ies Soveynment responded to these recommendations by creating the Office of Critical 
potert? PRaegctiont and Emergernioy Preparedness. The role of this agency is to work closely with 
the provinces atidianjiticipalitiess private industry and other countries to protect Canada's electronic 
infrastructure against possibl Eher bižedattacks and natural disasters. In 2003, the agency was 
amalgamated into the Public Safety; arid Hematiiency Preparedness department. 
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In addition, each federal government department and agency has information technology, Um: policies 
and procedures. The Communications Security Establishment (ESE} advises the federal government on 


the security aspects of government automated information SIS o ENS e De ; dee 
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The CSIS Information Operations program was initiated in 1997. As with all CSIS investigations, this 
program derives its authority from the CSIS Act. Under sections 2 (a) (b) and (c) of the Act, threats to the 
security of Canada are defined as: espionage or sabotage, foreign influence activities, or serious acts of 
violence against persons or property in support of achieving a political objective. The information 
operations threat may fall under any of these three sections. 
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The Service focuses its, investigations on threats oringtdents where the integrity, satiety, or 
availability of critical į in sfotiieige’tifrastructuré is affected, AS adresult, three conditions must appear in 
order to initiate a CSIS "informatioty operations” investigation, Dat is, the incident: 
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a) must be a computer-based attack 


b) must, within reason, appear to be orchestrated by a foreign government, térrorist group or politically 
motivated extremists; 


c) must be done for the purpose of espionage, sabotage, foreign influence or politically motivated 
violence. 


l RO ig wë Geer hiany. ‘ofthe computer intrusions occurring within Canada. For example, most 

Er, "Fach E activity i is being dene D thyill- seéking amateurs with no political agenda. Moreover, a certain 
"gioun ‘ot hackihgis conducted by criminats for monetary gain and by corporations seeking an unfair 
competitives Väntag Ger another conipany. These types of computer intrusions fall outside the CSIS 
mandate but maybe of interest ta law enforcement. The Service confines its investigation to computer 
intrusions conducted witha “poltical fiyati tion". That is, whether a hostile intelligence service is 
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Since the threat from cyber sabotage and cyber terrorism is part of a broader ecanomiq threat to R 
sectors of Canadian society, CSIS works closely with other government departnyents doch as the;Rpyal 
Canadian Mounted Police, the Department of National Defence and the Communications- $ecùrity. 
Establishment. Ry NAi 


Furthermore, within the international milieu, CSIS liaises and exchanges information with allied agencies 
to remain abreast of the global threat and how it may affect Canada's nationa! security. CSIS also 
participates with the federal government in broader G-8 efforts aimed at addressing the cyber threat. 
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One of the greatest challenges it pountering the thréatin the realm oFFO is that borders have become 

meaningless to anyone operating in a vidtyal efiviranment. Even if greatidiligence was taken in the effort 
to remove vulnerabilities, it would be ainwpst Wopneel e to eliminate them ehtffely because attack tools, 
networks and network control systems are in d-constaht state of opon: 
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As new technologies develop, so too will new attack tools and mechanisthe\As X result, governments 
will have to set procedures in place to allow security initiatives to evolve to deal with new threats as 
they arise. For example, the risks involved with the movement of the private sector to an e-commerce 
environment, the initiatives within the private sector to provide services and system interconnection 
through wireless means, and the use of personal digital assistants all present challenges from a security 
perspective. f 
ra ` a 
Hacking istoecolifing erte certain extent because some elements of both the private and public 
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PRO sect around the world e Sen gore interested in connecting to the Internet than in facilitating 
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CSIS maintains a national Liaison Awareness Program. The programi todevelog an ongoing 

dialogue with both public and private organizations: Concerning, phe threat posed toCanadiani interests 

from cyber-based attacks. The purpose of the program, is ‘to enable Cas to collect and, analyse, 

information that will assist it in its investigation of these thieats i whith couldhave implications for AN, 
Canada's national security. The Service then assesses the threat, ‘and provides advice tc to government? “Op 
accordingly. This program is an important vehicle used by the Service to articulate i mestage to, the 


Canadian public. °A L " PER "4 
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Backgrounder: Collection of Security Intelligehce Outside’at Ganada 
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Why is it important to collect security intelligence outside of Canada? Så EN ERSA 
Uer, arg E 


In order to carry out its role of identifying and reporting on threats to Canada’s security, the Canadian 
Security Intelligence Service (CSIS) must pursue all intelligence leads, whether national or international 
in origin. Given that many current threats to Canada’s security originate outside of Canada’s borders, 
CSIS is increasing its information collection capacity at the international level. 


Does CSIS have a legal mandate Den Deg: abroad? 
<SSep 
iC SS 7 NE Pp We 


Section 12 of the csig nce iets she Service to Huel and retain information and intelligence 
on activities that may, on reasdn-able Greter suspected OF ypnstituting a threat to the security of 
Canada. It places no geographic Nee gathering.” VE 


The Security Intelligence Review Committee, the external body that revieig CSIs, has stated that the 
Service has a clear mandate to conduct Section 12 investigations outside Canada. 


CSIS has conducted operations abroad since its inception; with the evolving nature of the threat, these 
operations are increasingly com-plex and sophisticated. 


What louie ` nai security threats to Canada? 
Ac z de S 
ONNO D 
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E Ton by Sets that wich) is inspired by the ideology of Al Qaeda, is the primary interna-tional 
threatito Caradian v Security. Countet-terrpristvis consequently the Service's inves-tigative priority. 
Other Weizen pitarities include the prdliferation of weapons of mass de-struction and the activities 
of hostile intelligence” wencies. Dn Costa, including economic espio-nage and interference in émigré and 
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expatriate communities. These complex and challenging threats IK e e increasingly 
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How does CSIS gather intelligence abroad? SUp pN A S Lo 
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The CSIS Act allows the Service to enter into an arrangement with a foreign intelligence or law 
enforcement agency, after obtaining approval from the Minister of Public Safety and consulting with the 
Minister of Foreign Affairs. Currently, the Service has about 270 cooperative relation-ships with more 
than 145 countries, giving it access to global information and intelligence on potential terrorist threats. 


The Service has wn A Officers postd@ ayerséas, i ing at Canadian missions in London, Paris and 
Washington. Wer “RE ZS Ire a, PR Oe, 
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Covert Collection SUR PIS a D 
ACO MEN! S 
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When necessary, the Service may engage in covert operational activitie ollie of Canada. These 


activities are varied in nature, but all are conducted in accordance with teesis Act, CSIS policy and 
Ministerial Direction, and with appropriate approvals in place. 


The combination of overt and covert information collection allows the Service to produce the kind of 
strategic intelligence and advice that govern-ment decision-makers need to deal with today’s complex 
int nal segurity threats. 


UN, 
RE heg & Nao! Magy Thy 
a Sp, SR ATIO ET 4 
O; RENG U op. ae, f 
For comments bi uG, Selcp ct the Canadian Security Intelligence Service (CSIS) 
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Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us” page. 
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ARCHIVED: PDF version [192 KB] 
Building an Integrated Security System 


The Government of Canada, as part of its National Security Policy, is building a fully integrated security 
system, to enable Canada to respond more effectively to existing and emerging threats to its national 
seciitity, The necessity for an integrated security system has become increasingly evident in recent 
years, most’ ni i / demonstrated by the events of September 11, 2001, and the numerous and 
widespread-terrorist‘attacks Since then. The requirement to encourage information-sharing and 


Ores ation among Grganizations that collect and analyze intelligence vital to national security is 
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An effective security system begins with a compréhensive threat assessment. Wale mary individual 
departments and agencies produce threat assessments; their ability to share informatléfiapd conduct 
effective analysis has been inconsistent in the past. To address thiogap,- the:Government of Carfada 
established the Integrated Threat Assessment Centre (ITAC), which has been, opetationial since October 


15th, 2004. 
i sech 
M4 Tones 
ITAC's Role 


ITAC's primary objective is to produce comprehensive threat assessments, which are distributed within 
the intelligence community and to first-line responders, such as law enforcement, on a timely basis. Its 
assessments, based on intelligence and trend analysis, evaluate both the probability and potential 
consequences of threats. Such ne the Government of Canada to coordinate activities in 
response to specific threats in order 10 farayehior mitigate risks to public safety. 


Administration and ZC ose 
Se tors Të 
SUR lan A Me LO, . 
With a budget of 30 million dollars over five years, TARis, a/Kingtign ar e Weer of the Canadian 
Security intelligence Service (CSIS). It is housed within csist IShetadguarters th a and supported 24/7 
by the CSIS Threat Management Centre. ‘Ap O CLS 


ITAC works closely with the National Security Advisor (NSA) who, in consultation with the Director of 
CSIS, appoints ITAC's Director. Twice a year, the NSA chairs ITAC's Management Board meeting, 
attended by deputy ministers from participating organizations, to review ITAC's performance. An 
Assessment Management Committee, composed of assistant deputy ministers from participating 
orgatizatie ions, WEN advice to the Management Board on the focus, effectiveness and efficiency of 
ITAC activities; is ommittee and the NSA assist the ITAC Director in establishing threat assessment 
priorities. Wkgig.rédtired io submit an annual report to Cabinet. 
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Public Safety Canada 
SE? e ONNE, 

Canadian Security Intelligence Service Woo De 

Canada Border Service Agency 
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These representatives bring the information and expertise of their respective organizations to ITAC. 
When required, ITAC can also draw upon the specialized knowledge of other federal government 
agencies, such as Agriculture and Agri-Food Canada, Health Canada, Environment Canada and Natural 
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Resources Canada. 

International Cooperation 


Canadian security wilfincreasingly depend on the country's ability to contribute to international 
security. Accordingly, the Govermmenttof Canada, thréygh (TAC, is promoting a more integrated 
international intelligence combyunity by cooperating with foreign integrated threat assessment centres, 
including the Joint Terrorism Analysis Centre, Britaia; the Nationat Countertegrorism Center, in the 
United States; the National Threat Assessment Centre in Australia; and the Combined Threat 
Assessment Group, in New Zealand. À ji , Pee l4 
NEG Eise? 
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Conclusion 


ITAC is an essential component of the Government of Canada's efforts to build an integrated national 
security system. The centre facilitates increased information-sharing and integrated intelligence 
analysis. Its comprehensive threat assessments provide policy-makers and first responders with the 
informatipn heroes to make decisions and take actions that contribute to the safety and security of 
Canadians, o NS e . 
CRG. * Ty SO U, 
S E p,YNp 


-GN 
Lan MEn sy | 
For comments or enquiries] Plapss Eéhtact tieyCanadian Security Intelligence Service (CSIS): 
API, ES 


ei 
PR N, 
l OTe Ey... O, 
Cp oO SE By R NE, 
P.O. Box 9732 Zi e SS aa RATY 
Os D (e Oe 
Postal Station T . Maco 
S 


Ottawa, Ontario 
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Telephone 613-231-0100 or 


Fax 613-231-0612 
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Beginning in November 2001, the Government of Canada adopted a new policy which requires that all 
refugee claimants to Canada be subject to Refugee Claimant Screening. This process involves checking 
refugee claimants against CSIS and RCMP records at the beginning of their determination process and in 
advance of Immigration and Refugee Board (IRB) hearings. The purpose of the program is to identify and 
filter potential security and criminal cases as early as possible in the refugee protection determination 
process. The Refugee Claimant Screening program is conducted by the Security Screening Branch of the 
Canadian Security Intelligence Service (CSIS) for the purpose of providing security-related advice to the 
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Canada has signed the 1951 Convention Relating to the Status of Rétagegs Gnd} 1667 Protocol. 

Refugee protection is conferred on persons when theIRB determines thattiey are Convention.refugees 
Gei 17, ef VE A) d 


or persons in need of protection. A Ou pN js ef Le Any ne Aer, 


ae ME Ze: 
A Convention refugee is a person outside of their country of nationality or hab Goal danne 
unable or unwilling to return to that country because of a well-founded fear of persectiti i ofensors 
of race, religion, political opinion, nationality or membership in a particular social group. "an ue, 
e fe: we 6 
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A person in need of protection is a person in Canada whose removal to their country of nationality or 
former habitual residence would subject them to the possibility of torture, risk to life, or risk of cruel and 
unusual treatment or punishment. 


Wars, famines, natural disasters, or state policies, such as ethnic cleansing, are common reasons for 
people to flee their homelands. Between 20000. and-30,000 persons request refugee status annually in 


Canada and now all Vente saty checks. Ne Pp, poke e 
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Refugee Claimant Screening is a relatively recent government initiative shtéiagh Or, to ensure that all 
refugee claimants arriving in Canada are subject to a screening process similar to that used for 
applicants for permanent residence. The Security Screening Branch of CSIS has, however, been 
conducting for a number of years security screening of those Convention refugees and all other 
immigrants who apply for permanent residence status from both within and outside of Canada. It has 
also provided advice to the Minister of Citizenship and Immigration related directly to the security 
inadmissibility criteria contained in the Immigration and Refugee Protection Act (IRPA). The branch also 
provides CIC with security assessments on applicants for Canadian citizenship. 


Les 
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ada‘ réfugee determination system is recognized around the world, but was deemed 


t réh à Batanced Series of measures that’ would preserve Canada's tradition of offering protection to 
genuine refigees, While iNofkasing integrity and effectiveness. By adopting a Refugee Claimant 
Screening programy the detament bas taken action to ensure that our immigration and refugee 
determination systems are‘nat op do abuse by criminals or terrorists. 
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Prior to November 2001, refugees would only be screened once they applied for permanent resident 
status in Canada. To apply for permanent residence, a person must. have been determined to bea, 
Convention refugee by the IRB. However, many refugee applicants were never Scpeened as they.never 
applied for permanent resident status. The fact that the government could not'detersnine for certain the 
whereabouts of unscreened refugee claimants, combined with the fact that it cantake a year or more 
between application for refugee status and a hearing, meant that thousands of unscreeied refugee, 
claimants could be living in Canada at any time. 
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The issue of unaccounted refugee claimants was a source of concern for a number of reasons, some of 
which were security-related. One such reason was the potential for terrorists to slip into Canada as part 
of the refugee stream. Another was the possibility that certain people could attempt to use refugee 
status to bring foreign-rooted issues to Canada, undermining domestic security within this country. 
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This situation led the Government of Canada terconclude that a security gap existed in the refugee 
immigration stream. The Refigee-Claimant Screening programas introduced in order to close this 
security gap. This progtath seeks to identify and filter potential Security and criminal cases from the 
refugee claimant stream as early.as possible ih the. determination procéss, thereby strengthening the 
integrity of the refugee determination picass Bhd enhancing public safety. 
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How Is Screening for Refugee Claimants Conducted? “Altar Ney S 


Refugee claimants may make a claim for refugee protection at any CIC Port of Entry (POE) office (airport 
or land border crossing) or inland CIC office across the country. In the case of applicants where no initial 
security concerns are noted by the CIC officer, the refugee claimants’ background information is 
forwarded by CIC to the CSIS Security Screening Branch to conduct its screening checks. 
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A second disting, yet gomplementary, program assists in identifying refugee claimants who are 


a Q reiege for Sècutity fe asons as arly as possible in the refugee determination process. This program 
"Ce vis Kon asthe Fort of Entrytnterdietion Program (POEIP). Should a front- line CIC officer posted at a 


port df enitryshaye er concerns pertaining to an individual's inadmissibility to Canada, the officer 

may request the as R eStacsis officer to condhict a joint interview of the individual and to provide 

security-related advide, By Sérgenih those with security concerns at the port of entry, the POEIP seeks 
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to prevent persons who are inadmissible under IRPA from entering or gaining status in Canada. Since the 
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events of September 11, 2001, CSIS is present at selected bordel Goin ang iNernational airports to 
assist Immigration and Customs officers. Bon. ` e, >70; E Pay Oe 
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As with all of its immigration screening programs, the Service advises if any security. concerns rela 
a particular application surface in the course of its checks and provides CIC gh elevate security. advice 
if such concerns come to light. In all immigration and citizenship applications, the Minister often 
and Immigration has the ultimate responsibility of determination for the application. vA 
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Part of the Government's Overall Commitment to National Security 


Screening of Refugee Claimants is part of the Government of Canada's overall commitment to protect 
Canada's national security interests. With between 20,000 and 30,000 refugee claims annually, Refugee 
Claimant Screening serves as a first ine of défence against those who would act against Canada's 
citizens or interests by using its refugee policies. to  Bdin-access to the country. CSIS, through its Security 
Screening Branch, assists the Mipister of Citizenship and Imfnigration Canada to ensure that those who 
are inadmissible to Chiad for Ls ips of security ‘are identified and ‘prevented, as rapidly as possible, 
from taking up residence iri Canada. " Le $ 
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Introduction 
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This Backgrounder, one of a series, will attempt to put into context the (Qh of Canada’s security 
intelligence operations outside of Canada - in part because there continue to be questions, and perhaps 
some confusion, about the issue (often resulting from definitional problems) and in part because the 


nature and scope of CSIS operations abroad have changed over the years.1 


Section 12 of the CSIS Act sets out the primary mandate of the Service: Collecting information and 
intelligenéé relatet to. “threats to the security of Canada”, a term defined in section 2 of the CSIS Act.2 
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Canada’s first security aR SCH gä ion was established by Sir John A. Macdonald before 
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At the turn op the century, rumours of American plots to annex the SC were. igyestigated Macha et the? 
surveillance of suspected plotters in the United States and Canada, and by infiltrating same Ziegeen 
miners’ organizations. Nm oP 
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The First World War saw further activities in the United States directed against agents suspected of 
espionage and subversion. Before the United States’ entry into World War I, the Commissioner of the 
Royal North West Mounted Police directed, from the force’s headquarters in Regina, investigations on 
persons of German and Austrian extraction suspected of launching espionage or sabotage activities 
against Canada from the western United States. 
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When the RCMP became ponsi Aea metz intelligence in 1920, it adopted the policy of 
restricting its covert Sfferations ta within Caflada, ‘This practice changed with the creation of first Special 
Branch and later the RCMP Security Service. > its Laon pkio ya MeBonald Commission described the 
(then) current practice as GH Dee V : ar 1 N Ao A Nop 
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Covert Security Service operations outside Canada toildydare s eonductet-on an ad hoc basis. These cases 
involving foreign travel always arise from an internal security tiayiaatignpegun i in Canada. Generally, 
the rationale for such operations is that the information sought related Mëscht the internal security 
of Canada and is not the kind of information that can be or should be obtained through liaison with 
friendly security and intelligence agencies. 


The McDonald Commission 
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Intelligence is often divided into categories such as “security itelligence” (threat-related) DP “forelgty, Lo 
intelligence” (non threat-related information about foreign individuats or states}, the former sometimes 
within the purview of defensive services and the latter part of the mandate òf offensive s senden, 
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(b) on the basis of the activities of a service i D 


Services which engage in “covert” or “executive” actions such as assassinations or attempting to 
promote regime change in foreign countries are sometimes described as offensive services. 
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The Commission noted that the mandate it recommended’ ‘bbe new service could be considered to be 
“defensive” both in the sense that the intelligence to be collected mast pertain to threats to the security 
of Canada, and in the sense that the service’s mandate be confined to colletting and analysing 
information and producing intelligence. However, in discussing the geographic location of a security 
intelligence agency’s activities, McDonald said: 


If security intelligence investigations which begin in Canada must cease at the Canadian border, 
infdrrati ion and sources of information important to Canadian security will be lost. .... If to operate 
abroad is Pr ‘then Canada’s security intelligence agency should be offensive in this sense . 
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When adopted in ai We í ẹd, the McDonald Commission’s recommendations with 


regard to the collection of of secuii abroad. 
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As noted earlier, section 12 of the CSIS Act defines the Service’s primary operational mandate and was 
consciously drafted to contain no restriction at all about where the Service may collect sch information. 
Further, nothing prohibits the Service from retaining intelligence related to fordignstates or persons if 
the information is acquired in relation to the investigation of the threats tinder seotign 12, 


As the (then) Solicitor-General Bob Kaplan said during debate on the Bill: 


there is no statutory requirement that the entire activities of the Security Intelligence Service be 
performed in Canada. | think that would be unduly inhibiting. 


Though the specific challenges Wat Canadian national security might face in the future were 
unpredictable, those responsible for drafting the Jépislation foresaw the need for a legal framework that 
would enable the e neg to adapt to changes th the global security environment. 
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in its ability to collect non threat-related foreign intelligence Am relation to the defence of Canada or 
the conduct of the international affairs of Canada. While secutity intefigence collection remains the 
priority for the Service, the collection in Canada of such non threat-related foreign intelligence has been 
a growing part of the Service’s operations. D 


The Changing Threat 
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Over time, however, CSIS has shifted its operational priorities to fieeteqirementsrelated to public 
safety, most notably exemplified in the growing threats,of Steep penal reet alt ë proliferation 
of weapons of mass destruction. By 1989/1990, the Service «operational priorities yp; which Cabinet i is 
consulted, specified public safety as the number one requirement, 4 rank ne Which remalddoyrenicay 
Gi, 7 
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r "E A SY, 
Given that virtually all current threats to the security of Canada either have their SZ abrotar are 
manifested across international borders, CSIS has had to increasingly look outside Canada’s order, A YNE 
both to understand the threat and to build strong cooperative relationships with intelligence service V 
around the world. As a result, the number of liaison arrangements with foreign security and intelligence 
organizations has grown - from around 50 in the late 1980s to nearly 250 today. 


In addition to overt liaison activity, foreign covert operational activities have also been expanded and 
changed. In the mid-90s this often meant cooperating with a sister service from another country, 
establishing joint operations to dbtain information of mutual security concern. Such operations remain 
an important part of the Service’s repertoire. Since the late 90s, however, always subject to resource 
considerations and a careful risk assessment, the Service has increasingly engaged in covert foreign 
operations. This change wat due, gt part, to the changing nature of the threat; it was also a logical 
development of the Service's grawingexpetience in these operations and, lastly, because of our 
country’s often unique access to individtiats and sources able to provide information about threats to 
the security of Canada. Our centralized information. holdings, which include all intelligence (whether 
collected domestically, outside of Canada or recelvad from ligisorn partners) enable the Service to fully 
analyse this information, all subject to full access and review by.ourreview agencies. 


Current Practice 


The accelerating international dimensions of the terrorist threat have seen foreign collection techniques 
employed more frequently. As expertise has grown, CSIS’s foreign operations have expanded to include, 

scher pthers, such techniques as: tasking human sources to travel abroad, recruiting foreign sources, 

meeting zeg Zi GN countries. 
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Mr. Speaker, what | am telling my honourable colleague, and | have ai thi iy4imes in the House, is 
that CSIS has the authority to investigate, inside of this-countiy and outside oý HIS ont activity 
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As noted earlier, subject always to resource considerations and a careful aS SORNE ARN GSIS will 
continue to consider the use of covert intelligence operations outside of Canada if it Wik sist > oA 
investigating and better informing the government about the threats that we face to our national, `" Mey 
security. Oy G S 
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1 For more information on the history and mandate of CSIS, refer to other Backgrounders available on 
the CSIS Web site. Titles include: The CSIS Act; The CSIS Mandate; Accountability and Review; and CSIS 
and the Intelligence Cycle. 
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2 For the exact wording of both sectidr22 andthe definition of “threats to the security of Canada” in 
section 2, refer to the ERG Actayailable on the esis Web EEN 
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3 “Foreign intelligence” in the conte: Ve section £6 of the CIS Act memis “infomation or intelligence 
relating to the capabilities, intentions or activities of {á} ány- foreign state or group of foreign states; or 
(b) any person other than [a Canadian]. Under section 16/CSIS May.assistiin the collection of such 
information but only within Canada and only on the personal request of the Minister of National 
Defence or the Minister of Foreign Affairs and International Trade and with thé consent of the Solicitor 
General. ` 
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4 For further information on how the nature of terrorism has changed and what the response of Canada 
and CSIS has been, please refer to various CSIS publications such as: International Terrorism: the Threat 
to Canada or Operational Programs: Counter-Terrorism available on the CSIS Web site. 
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Information identified as archived on the Web is for reference, research or recordkeeping purposes. It 
has not been altered or updated after the date of archiving. Web pages that are archived on the Web 
are not subject to the Government of Canada Web Standards. As per the Communications Policy of the 
Government of Canada, you can request alternate formats on the "Contact Us" page. 
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In 1969, the Royal Commission on Security (the MacketziéCammission) published a report. Its principal 
recommendation was to establish a civilian agency, separate fromm the Royal Canadian Mounted Police, 
to assume the security intelligence function in Canada. The Commission, in cansidering effective 
“security methods and procedures", neither explored nor recommended fogchanisms for independent, 
external-to-government review. f 


After four years of work, the McDonald Commission1 reported in 1981 and advanced, like Mackenzie, 
the central proposal for a civilian security intelligence service for Canada. McDonald did not content 
himself with narrow prescriptions for a legislated mandate and internal, or internal-to-government, 
mechahisi 1g to érayre the new agency's proper functioning. The Commission Report made extensive 
recommendations for whgeit termed "External Controls”. These included: 


Er T U, 
ROn. “AK To TE Pa ND, 
ze R O; S; 
ne NON SE g Nog Mic 2 The 
théKederd?Eou Ke with Glëest disclosure and intrusive investigative techniques; 
Loy Sy, NS 7 Og fe ACp. [Op 
: Atac eM Ol Sy 
a Security Appeals Tribunal, reg Seen tout denial of security clearances; 
"Oe Wa 


: "ës, Ze ZG 
an Advisory Council on Security and Intelligence, to be e independent-and arm sengt, Ameng other 
functions, it would conduct a continuous review of policy and practices with Retroactive forge t To-ensure 
legality and propriety. It would have access to all information and files, iavegtigate complaints | e certain: D 
circumstances, and report to the Minister and a Committee of Parliament: H ern Lo, 
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a Joint Parliamentary Committee of the House and Senate, to monitor the "effectiveness and orien rks 
of the new Service.2 


In August, 1981, the Government responded to the McDonald Commission Report by announcing that 
the Security Service would be separated prom the RCMP and established as a civilian security intelligence 
agency. A transitionakgroup was set up to study the: McDonald recommendations in detail and to 
develop specific plansfor erating the.new agency, giving Paramount consideration to five basic 
principles. The last of. these stiputated that the pew agency must "Be open to a satisfactory external 
review, ensuring that the agency tesne Sg powers and that itis wot misused by government”.3 
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There followed nearly two years of intensive work by RS The, Cabingt Committee on Security and 
Intelligence, chaired by the Prime Minister, met several times to monitor progress and give guidance. 
The legislative phase was long, difficult and marked by: » 


intense scrutiny and debate, both public and parliamentary; 


the orig il (0257) stalling in the House on First Reading and, as rarely seen, its subject matter 
referred to A Gring of the Senate; 
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subsequent Cabinet Consideration (ec Dës Ain January 1984) of revised legislation, Bill C-9; 
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a further three months of hearings and study by wo Hie Sg commie rand s 
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Emerging from this process, Bill C-9 drew heavily on McDonald's Report and recommendations, 
accepting and validating the Commission's arguments in support of such proposals, leavened by the 
findings of the Special Senate Committee. And the resultant Canadian Security Intelligence Service (CSIS) 
Act, as McDonald had intended it should, accomplished far more than a mere charter for a security 
agency. 


The CSIS Act established, in law, a comprehensive: regime for the security intelligence function in 
Canada: a civilian agency with no executive terms dfreferenge; with clearly (and where appropriate, 
precisely) defined mandaté/and powers: subject toa, rigorous, intet-related system of political and 
judicial controls; and. impottantly, ‘subject to independent, are 's-length review. The centrepiece of that 
system for accountability, controtand review: was andi is the unique. combination of the Security 
Intelligence Review Committee (SIRC) andthe Inspector Gefteral (IG)-the former reporting, through the 
Minister, to Parliament; the latter, in a more specialized. but hay eran way, acting as the 


"Minister's 'eyes and ears' on the Service? A "Ng e 
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The review provisions of the CSIS Act were, in 1984, unprecedented in the world of intelligence and 
security intelligence agencies. Today, they remain unsurpassed by any other system of review in terms 
of scope, function and access to the records and personnel of the agency (CSIS) under review. Why 
unsurpassed? A simple, encompassing statement from SIRC’s first Annual Report provides an answer: 
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In combination with the Inspector General, SIRC represented a sed change inagrountability fora 
security intelligence function whose activities were traditionally clothed in secrecy. Mraddition, the 
activities of the Service are, like those of other govertment depattinents and agéncies Subject, tortie 
scrutiny of Officers of Parliament, namely the Auditor General, the Apres fo’ information aiid Privacy 


Commissioners and the Commissioner of Official Languages. : Sup) Ela, Gi l4 A 
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More than twenty years of experience with review allows the Service to offer the following 
observations. Any candid assessment must accept the fact that the CSIS-SIRC and CSIS-IG relationships 
involved a long, sometimes adversarial period of introduction, mutual adjustment, accommodation and 
consolidation. It can be argued that the relationships-particularly between CSIS and SIRC-took almost a 
decade to fully mature and work well. Indeed, that coincides with the experience in the United States, 
where the same time period applied to acceptance and full functioning of their process, which can be 
best described as oversight, as opposed to review ofactivities. ) 
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business of security intelligence, but aly int ral tas concept. A dual expectation emerged that 
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report on incidents in which the Service was mistakenly or unfairly accused and, absent SIRC, had no 
effective or objective means of public defence. 
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Over that twenty-year period, some early myths were exploded, ‘and some fears laid to ‘ast, regarding 
the potential adverse effect of the CSIS Act provisions for’ review. The mt important ófthesé was 

feared "chilling effect" on Service operational aggressiveness and injtiative-the prospect of review Op 
encouraging a risk-averse and ineffective Service. Though such negative étfect ism pst itypossible to 
measure, the number and success of Service investigations in that two-decade rale that this 
"effect" has not been significant-if it existed at all. 
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Similarly, concerns that comprehensive SIRC/IG access to Service files would cause nervous international 
partners and liaisons to restrict intelligence exchanges have not, in the long run, come to pass. Related 
worries about SIRC/IG ability to afford proper security to Service information and protect its human 
sources and sensitive collection methodologies have not been justified-"leakage" of classified 
information has not been a factor. 
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Finally, early and nanjan concerns AIRA seet phout the resource-intensive consequences 
of review: the spectre Saneha tied upih haen fèjew-generated demands that it would 
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While the Service does not quantify the "dollar pe ein. the resource implications for 
supporting and responding to requests from the SIRC andiG Are. not inconsequential. Some general 
information may give an Pee te of the extent of CSIS' daily ihvalveméhein this responsibility. 
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Under the Assistant Director, Secretariat (ADS), reporting to the Director of the Service, the External 
Review and Liaison (ER&L) section currently has 10 officers responsible for liaison with a current total of 
24 staff at SIRC and the IG. While ER&L is responsible for managing all reviews undertaken by both 
organizations and identifying and retrieving information for review, the formal responses to a large 
Wee. c of written enquiries and verbal briefings on various investigations are channelled through more 
thana Utley operat nal ; and technical branch coordinators within the Service's headquarters and in the 
six regiondkoffi GH BRAN Sixty- -five percent of the branch coordinators' time is spent on responding to 
A Ro oremi related to SRC dhd 1G studies. 
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The CSIS Acte 3 (Ri ss Sinc to ear ACR iat eon any action of the Service (s.41) and on the denial 
of a security cleararteé (3,42 SH Committee determines that the complaint should proceed to a 


24 L MOn he 
We) LS 
A. 


3103(18/09) 


be Pr 
| Son POC. 
formal hearing, the Service is required to BEE testimony troles Sergey A legal counsel-a 
resource-intensive undertaking. er AE oO LS 


Both review bodies travel to CSIS regional offices regularly to conduct interviews pfe employ ees E 
obtain information on investigative activities in the regional environment. SIRC and dees an 
annual audit of a regional office, which typically sees three to six reviewers conducting interviews i in a 
region over a three-to five-day period-a concentrated exercise which occupies a large number of 
regional resources. Additionally, a three-day audit of one of the Service's foreign liaison posts is done! 
yearly by SIRC. 


KI 


Liaison with SIRC and the IG takes place at all levels, and includes regular meetings with the senior 
management and Executive members of the Service. Over the course of a year, the Committee meets 
with the Director at least twice, in addition to meeting with two or three regional management teams. 
Those meetings are formal in nat, with the. Committee supplying a series of questions to the region in 
advance, and spending a half-day with the regional management team. The Inspector General meets 
annually with regiongbDirectors Generaland their Management teams, and with the majority of 
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Ill. SIRC and the IG - Their Role and Practica "ZS As 


measures they take to fulfill their function. 


CSIS Act s.38 sets out the fundamental function of the SIRC: "to review generally the performance by the 
Service of its duties and functions” and, in s.40, the purpose of such review: "ensuring that the activities 
of the Service are carried out in accordance with [the] Act, the regulations and directions issued by the 
Minist, and Watt the activities do not involve any unreasonable or unnecessary exercise by the 
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these are engi UG hater time-theré are D Service corners into which the light of review has not 
shone. In choosing actjyitio&on w which yearly, detailed reviews will concentrate, SIRC "takes into 
consideration such matteréas fe: was ‘and importance of CSIS investigations, the potential for 
particular activities to intrude on in dual sights and liberties, priorities and concerns for Parliament: 
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world events and their impact on threats to the security of Canada; 


trends or concerns identified in previous Committee reports; 
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cooperation and exchanges of information with foreign partners; and, 
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the level of intrusiveness of the investigation was proportionate to the seriousness and imminence of 
the threat [i.e. a "proportionality" test12] and 
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In addition to the conduct of such in-depth reviews, SIRC monitors Service pags Sad Priorities’, 
particularly in respect of the major Operational and Analytica}Branches ‘Counter Terrorist Counter 
Proliferation; Counter Intelligence; Security Screening [including Citizenship & Imritigration Sereenitog]; 
and, Research, Analysis & Production). This is accomplished through extensive oral and wien bri riefings, 
and also allows the Committee to fulfill its s.38(a)(vii) CSIS Act requitement te cortile and analyze” 
statistics on Service operational activities. All of this is in addition to SIRC 's responsibility tohear public 

` complaints against CSIS “with respect to any act or thing done by the Service".15 ° 4 tA 


It is also worth noting that SIRC's work plan is, each year, parallelled by that of the Inspector General 
who-quite separately-pursues her own examination of the Service's activities to determine their 
compliance with law and policy. In the Certificate of November 2003, the Inspector General's annual 
program of review activities was summarized as including: 
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comprehensive briefings on the front-end screening program of refugee claimants [- -] 


Ni E Taiha Review ( Committee: observed Mits 4989-90 Annual Report, "not many public institutions get the 

"ue reg attention that we give CIS, or ‘the publicity that goes with it. But independent review is the 
trade-off for. th wel ersithat. an intelligence agency | has- and needs-to intrude on individual privacy for 
the sake of natidnal emm? "dorsum, the review provisions of the CSIS Act-embodied in the SIRC and 
the IG-have proven, over ‘time; o haye sworked as Parliament intended: an uncompromising, non- 
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The Review Committee can-and has-articulated examples of how a Der and subsequent aug A 
have influenced positive changes in Canada's security intelligence posture ap landscape, sais 
Canadians and their security intelligence service. Those need not be repeated here. ^ ; INA PER 
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The SIRC/CSIS relationship has best been characterized as one of healthy tension. The Committee has, 
within the context of its legislated responsibility, the duty to maintain its distance, scepticism and 
capacity for fully independent, critical audit: in short, its "watchdog's" teeth and credibility. 


IV. Other Controls 


The controls exareised A B9SIRC ati fhe IG do Totvomiprise the söle check on Service activity. Extensive 
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The principal animating factor of CSIS internal controls is the Service's highly centralized nature-a 
centralization that extends to, and impacts upon, all aspects of operational decision-making. Most 
importantly, central operational control is manifested in two committees chaired by the Director, CSIS: 


the Target Approval and Review Committee (TARC). It includes the most senior Service operations 
managers, Department of Justice counsel and a designate of the Deputy Minister of Public Safety and 
Emergency Preparedness. It decides which groups or individuals will be subject to Service investigation 
and thetevel ofi inthusiveness appropriate to each. Thus, the origins, scope and intrusiveness of all 
investigations ESS Heo controlled at the most senior level. e 
PRO, “A Noe 
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the War ant Revie Committee (äise Havirig the same membership as TARC, with the notable 
addition of an ingepedident Counsel, it reviews anwépproves all s.21 CSIS Act warrant applications to the 
Federal Court. Thus‘ the: mustintrusive investigative powers of the Service are subject to the most 
senior level of examination and approval. before they are requested from the Federal Court. In 
considering these warrant applications, the Federal Court provides the essential element of judicial 
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Another unique provision of the CSIS Act, set out in section 20 of the legislation, is designed to thre NEY 
the reporting and investigation of all cases where CSIS employees may have failed to comply with N 
legislation or policy or committed an unlawful act in the performance of their duties. The purpose of this 
section is to require the reporting of alleged unlawful activities that may otherwise have remained 
undetected by provincial law enforcement agencies. 


Finally, CSIS internal controls operate within a broader framework of direction and accountability, most 
importantly including the Minister, 20 Parliament. A more detailed summary of the CSIS accountability 
and review framework and the security intéfligence cycle it regulates, can be found on the CSIS Web 
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In considering the dynamic between external review and internal Cans spplsyapote of balance was struck 
by Maurice Archdeacon in his 2003 Inspector General's Certificate. Mr. Atehideaton was Executive 
Director of SIRC from its inception until 1 September, 1999, when he was appointed Inspector General. 
He retired in November, 2003: 


"In my opinion, in the nearly twenty years during which | have had some knowledge of these matters, 
the men has evolved from being a rather disorganized organization with significant weaknesses, to a 
highly reggae effective arm of government. 
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Nevertheless, the existence and, from time to time, the observations af hewa outside review agencies 
have certainly contributed to the maturing process. [hape, astretire from actiye i pabicipatlon in this 
challenging environment, that no-one makes the mistake, so often made i in the past/of believing that 
current safeguards are no longer really necessary. The low tosts of the melen bodies and the: wett AN, 
special care taken in the selection of the Director of the Service area very siall ptive indeed to payor a 308 
professional, effective, and virtually trouble-free security service in these dangerous time! “17 
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Why is it important to collect security intelligence outside of Canada? Så ly ERSA 
On, ONN; 


In order to carry out its role of identifying and reporting on threats to Canada’s security, the Canadian 
Security Intelligence Service (CSIS) must pursue all intelligence leads, whether national or international ` 
in origin. Given that many current threats to Canada’s security originate outside of Canada’s borders, 
CSIS is increasing its information collection capacity at the international level. 


Does CSIS have a legal mandate Binge ition abroad? 


Section 12 of the ëtt Service to olia seni 1 étain information and intelligence 
on activities that may, on SEN Ee threat to the security of 
Canada. It places no geographic restridtlons DÉI inre gege gathering: op “Op 
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The Security Intelligence Review Committee, the external body that evieWs CSIs, has stated that the. 
Service has a clear mandate to conduct Section 12 investigations outside‘Cagada’ 


CSIS has conducted operations abroad since its inception; with the evolving nature of the threat, these 
operations are increasingly com-plex and sophisticated. 
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threattg Canadian Zenn, Counter‘teprorisr js,consequently the Service’s inves-tigative priority. 
Other investig Doug scinclude the proliferation of weapons of mass de-struction and the activities 
of hostile intelligence agenclesiin Canada, including economic espio-nage and interference in émigré and 
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The CSIS Act allows the Service to enter into an arrangement with a foreign intelligence or law 
enforcement agency, after obtaining approval from the Minister of Public Safety and consulting with the 
Minister of Foreign Affairs. Currently, the Service has about 270 cooperative relation-ships with more 
than 145 countries, giving it access to global information and intelligence on potential terrorist threats. 
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The Service has alia} Officers posté@oyersdaiinpiSding at Canadian missions in London, Paris and 
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When necessary, the Service may engage in covert operational activi e f Canada. These 


activities are varied in nature, but all are conducted in accordance with the tsis Act, CSIS policy and 
Ministerial Direction, and with appropriate approvals in place. 


The combination of overt and covert information collection allows the Service to produce the kind of 
Strategic intelligence and advice that govern-ment decision-makers need to deal with today’s complex 


ine iin Sage threats. 
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